last executing test programs: 1m28.259432655s ago: executing program 3 (id=212): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000000140021052bbd7000fbdbdf250a4000fe", @ANYRES32=r1, @ANYBLOB="08000a00040000000800080086060000140006000200000008000000010000000800000014000200ff"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x44080) 1m28.173944367s ago: executing program 3 (id=216): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) 1m28.153314458s ago: executing program 3 (id=217): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x1c0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000580)='./file0/file0\x00', 0x0, &(0x7f0000000040)={[{@grpid}, {@usrjquota}, {@orlov}]}, 0x1, 0xbdb, &(0x7f0000001c00)="$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") quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000004c0)={0xa363, 0x7, 0x0, 0x3}) 1m27.969095162s ago: executing program 3 (id=220): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x10000, &(0x7f0000001100)=ANY=[@ANYBLOB='nodots,fmask=00000000000000000006675,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x1, 0x206, &(0x7f0000000480)="$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") mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x202006c, &(0x7f0000001640)={[], [{@permit_directio}]}) 1m27.840372915s ago: executing program 3 (id=226): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) flistxattr(r0, 0x0, 0x0) 1m27.750571788s ago: executing program 3 (id=229): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r1, &(0x7f00000001c0)='m', 0x1, 0x1}]) 1m27.629279381s ago: executing program 32 (id=229): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r1, &(0x7f00000001c0)='m', 0x1, 0x1}]) 1m9.904543913s ago: executing program 2 (id=790): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001000)={0x2c, r1, 0x6f4edcbe8ca976f3, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 1m9.861221284s ago: executing program 2 (id=792): unshare(0x24060400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 1m9.855128135s ago: executing program 2 (id=794): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000001a40)={[{@gid}, {@dmask={'dmask', 0x3d, 0x7}}, {@discard}, {}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@namecase}, {@utf8}, {@errors_continue}, {@dmask={'dmask', 0x3d, 0x80000000}}]}, 0x1, 0x154a, &(0x7f0000000400)="$eJzs3AucjdX6OPDnWWu9Y0jaTXIZ1lrPy04uyyRJLklySZIkSXJLSJrkSEJiyC1pSEJyGZLLEJLLhDTu9/slIUmaJAnJLVn/z8Qcder3P+f8quP/P57v57M/8z57vc/az/s+e8972cw3nQZXb1ijSn0igj8EL/xIAoBYAOgPANcAQAAAZeLKxGWOZ5eY9MdehP25Hkq93BWwy4n7f2Xj/l/ZuP9XNu7/lY37f2Xj/l/ZuP9XNu4/Y1eyTVPzX8uPK/fB9/+vZHz8/y+SUXL0F2tKXt8ZIOZfTeH+//8P/0Au9/+/VvCvrMT9v7Jx/69UsZe7APb/AP78XwmyAXT8/RHu/3+V7P9uAvefsSvZL+8Fx8Llvx/9n35A5K/8DsT3uLCXL/92bpqadXD4h+1njDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcb+A077SxQAZC1f7roYY4wxxhhjjDH25/HZLncFjDHGGGOMMcYY++shCJCgIIAYyAaxkB1ygACIyRq/FuLgOsgN10MeyAv5ID/EQwEoCBoMWCAIoRAUhijcAEXgRigKxaA4lAAHJSEBboJScDOUhlugDNwKZeE2KAfloQJUhNuhEtwBleFOqAJ3QVWoBtWhBtwNNeEeqAX3Qm24D+rA/VAXHoB68CDUh4egATwMDeERaASPQmNoAk2hGTT/X+W/AN3gRegOPSAJekIveAl6Qx/oC/2gP7wMA+AVGAivQjIMgsHwGgyB12EovAHDYDiMgDdhJLwFo2A0jIGxkALjYDy8DRPgHZgIk2AyTIFUmArT4F2YDjNgJrwHs+B9mA1zYC7Mg7S/79cPYRF8BOmwGJbAUlgGy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW2AbbYQd8DDvhE9gFu2EPfAp74bN/M//UP+R3RkBAgQIVKozBGIzFWMyBOTAn5sRcmAsjGME4jMPcmBvzYB7Mh/kwHuOxIBZEgwYJCQthIYxiFItgESyKRbE4FkeHDhMwAUvhzVgaS2MZLINlsSyWw/JYHitiRayElbAyVsYqWAWrYlWsjtXxbrwbe2ItrIW1sTbWwTpZt6ewPtbHBtgAG2JDbISNsDE2xqbYFJtjc2yBLbAltsTW2BrbYBtsi20xEROxHbbD9tgeO2AH7IgdsRN2ws7YBbtkvJAN8EV8EXtgVdETe2Ev7I3J2fpiP+yHL+MAfAVfwVcxGQfhYHwNX8PXcSiexGHnh+MIHIGVxFs4CkcjibGYgik4HsfjBJyAE3ESTsIpmIpTcRpOw+k4A2fgezgL38f3cQ7OwXmYhmk4HxfgQlyIi/AUpuNiXIJLcRkux2W4ElfhSlyDa3ENrsf1uBE34mbcjFtxK27H7fgxKgD8BHfjbkzGvbgX9+E+3I/78QAewAzMwIN4EA/hITyMh/EIHsGjeAyP4zE8gSfwJJ7C03gaz+JZPIfPxX/V4ONiq5NBZFJCiRgRI2JFrMghcoicIqfIJXKJiIiIOBEncovcIo/II/KJfCJexIuCoqAwwggSYeY7WkRFVBQRRURRUVQUF8WFE04kiARRSpQSpUVpUUbcKsqK20Q5UV60chVFRVFJtHaVxZ2iiqgiqopqorqoIWqImqKmqCXkxc9IHVFXPCDqiZ7YFx8SmZ1pKAZhIzEYG4smf1+rhRiKLUUr0Vo8IYbjMGwrWrhE8bRoJ0Zhe/E3MRqfFR3FWOwknhedRRfRVbwguomWrrvoISZiT9FLTMHeoo/oK/qJ6VhNvIezslcXr4pkMUgMFq+Jefi6GCquEsPEcDFCvClGirfEKDFajBFjRYoYJ8aLt8UE8Y6YKCaJyWKKSBVTxTTxrpguZoiZ4j0xS7wvZos5Yq6YJ9LEB2K+WCAWig/FIvGRSBeLxRKxVCwTy8UKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vFDvGx2Ck+EbvEbrFHfCr2is/EPvG52C++EAfElyJDfCUOiq/FIfGNOCy+FUfEd+KoOCaOi+/FCfGDOClOidPijDgrfhTnxE/ivPACJEohpVQykDEym4yV2WUOeZXMKYOs3/8yTl4nc8vrZR6ZV+aT+WW8LCALSi2NtJJkKAvJwjIqb5BF5I2yqCwmi8sS0smSMkHeJEvJm2VpeYssI2+VZeVtspwsLyvIivJ2WUneISFy4TWqymqyuqwh75ZJcI+sJe+VteV9so68X9aVD8h68kFZXz4kG8iHZUP5iGwkH5WNZRPZVDaTzeVjsoV8XLaUrWRr+YRsI5+UbeVTMlE+LdtJf/Et8qzsKJ+TneTzsrPsIrvKn+R56WV32UNCT5C95Euyt+wj+8p+sr98WQ6Qr8iB8lWZLAfJwfI1OUS+LofKN+QwOVyOkG/KkfItOUqOlmPkWJkix8nx8m05Qb4jJ8pJcrKcIlPlVNn34kwzpfyn+W//Tv7An199o9wkN8stcqvcJrfLHfJjuVPulLvkLrlH7pF75V65T+6T++V+eUAekBkyQx6UB+UheUgeloflEXlEHpXH5Bn5vTwhf5An5Sl5Sp6RZ+VZee7iPgCFSiiplApUjMqmYlV2lUNdpXKqq1UudY2KqGtVnLpO5VbXqzwqr8qn8qt4VUAVVFoZZRWpUBVShVVU3YAX3zCquCqhnCqpEtRN/06+KqJuVEVVsV/lZ9WX9D/U11w1Vy1UC9VStVStVWvVRrVRbVVblagSVTvVTrVX7VUH1UF1VB1VJ9VJdVadVVfVVXVT3VR31V0lqSTVS72keqs+qq/qp/qrl0XmNgxUA1WySlaD1WA1RA1RQ9VQNUwNUyPUCDVSjVSj1Cg1Ro1RKSpFjVfj1QQ1QU1UE9VkNVmlqlQ1TU1T09V0NVPNVLPULDVbzVZz1VyVptLUfDVfLVQL1SK1SKWrxWqxWqqWquVquVqpVqrVarVaq9aq9Wq9Sleb1Ca1RW1R29Q2tUPtUDvVTrVL7VJ71B61V+1V+9Q+tV/tVwfUAZWhMtRBdVAdUofUYXVYHVFH1FF1VB1Xx9UJdUKdVCfVaXVanVVn1Tl1Tp1X5zNP+wIRiEAFKogJYoLYIDbIEeQIcgY5g1xBriASRIK4IC7IHVwf5AnyBvmC/EF8UCAoGOjABDYQF5seDW4IigQ3BkWDYkHxoETggpJBQnBTUCq4OSgd3BKUCW4Nyga3BeWC8kGFoGJwe1ApuCOoHNwZVAnuCqoG1YLqQY3g7qBmcE9QK7g3qB3cF9QJ7g/qBg8E9YIHg/rBQ0GD4OGgYfBI0Ch4NGgcNAmaBs2C5j/Pj/jnzO/9ybyPu+66h07SPXUv/ZLurfvovrqf7q9f1gP0K3qgflUn60F6sH5ND9Gv66H6DT1MD9cj9Jt6pH5Lj9Kj9Rg9VqfocXq8fltP0O/oiXqSnqyn6FQ9VU/T7+rpeoaeqd/Ts/T7eraeo+fqeTpNf6Dn6wV6of5QL9If6XS9WC/RS/UyvVyv0Cv1Kr1ar9Fr9Tq9Xm/QG/UmvVlv0Vv1Nr1d79Af6536E71L79Z79Kd6r/5M79Of6/36C31Af6kz9Ff6oP5aH9Lf6MP6W31Ef6eP6mO6tP5en9A/6JP6lD6tz+iz+kd9Tv+kz2ufeXKfeXg3yigTY2JMrIk1OUwOk9PkNLlMLhMxERNn4kxuk9vkMXlMPpPPxJt4U9AUNJnIkClkCpmoiZoipogpaoqa4qa4ccaZBJNgSplSprQpbcqYMqasKWvKmXKmgqlgbje3mzvMHeZOc6e5y9xlqplqpoapYWqamqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkGpvGpqlpapqb5qaFaWFampamtWlt2pg2pq1paxJNomln2pn2pr3pYDqYjqaj6WQ6mc6ms+lquppuppvpbrqbJJNkepleprfpbfqavqa/6W8GmAFmoBlokk2yGWwGmyFmiBlqhpphZrgZkXmiat4yo8xoM8aMNSkmxYw3480EM8FMNBPNZDPZpJpUM81MM9PNdDPTzDSzzCwz28w2c81ck2bSzHwz3yw0C80is8ikm3SzxCwxy8wys8KsMKvMKrPGrDHrYJ3ZYDaYTWaT2WK2mG1mm9lhdpidZqfZZXaZPWaP2Wv2mn1mn9lv9psD5oDJMBnmoDloDplD5rA5bI6YI+aoOWqOm+PmhDlhTpqT5rQ5bc6avBePl97E2uw2h73K5rRX21z2GvuPcT6b38bbArag1TaPzfur2Fhri9pitrgtYZ0taRPsTb+Jy9nytoKtaG+3lewdtvJv4pr2HlvL3mtr2/tsDXv3r+I69n5b1z5i6yEC2Ca2gW1mG9pHbCP7qG1sm9imtpltY5+0be1TNtE+bdvZZ34Tz7cL7Cq72q6xa+0uu9uetmfsIfuNPWt/tN1tD9vfvmwH2FfsQPuqTbaDfhOPsG/akfYtO8qOtmPs2N/Ek+0Um2qn2mn2XTvdzvhNnGY/sLPsQjvbzrFz7byf48yaFtoP7SL7kU23ASyxS+0yu9yusCv/XutSu95usBvtTvuJ3WK32m12u92RdSJsd9s99lO7135mD9qv7X77hT1gD9sM+9XPceb2Hbbf2iP2O3vUHrPH7ff2hP1BZWVnbvv39id73noLhAQkSVFAMZSNYik75aCrKCddTbnoGorQtRRH11Fuup7yUF7KR/kpngpQQdJkyBJRSIWoMEXpBsoqrziVIEclKYFuolJ0M5WmW6gM3Upl6TYqR+WpAlWk26kS3UGV6U6qQndRVapG1akG3U016R6qRfdSbbqP6tD9VJceoHr0INWnh6gBPUwN6RFqRI9SY2pCTakZNafHqAU9Ti2pFbWmJ6gNPUlt6SlKpKepHT1D7elv1IGepY70HHWi56kzdaGu9AJ1oxepO/WgJOpJvegl6k19qC/1o/70Mg2gV2ggvUrJNIgG02s0hF6nofQGDaPhNILepJH0Fo2i0TSGxlIKjaPx9DZNoHdoIk2iyTSFUmkqTaN3aTrNoJn0Hs2i92k2zaG5NI/S6AOaTwtoIX1Ii+gjSqfFtISW0jJaTitoJa2i1bSG1tI6Wk8baCNtos20hbbSNtpOO+hj2kmf0C7aTXvoU9pLn9E++pz20xd0gL6kDPqKDtLXdIi+ocP0re9B39FROkbH6Xs6QT/QSTpFp+kMnaUf6Rz9ROfJE4QYilCGKgzCmDBbGBtmD3OEV4U5w6vDXOE1YSS8NowLrwtzh9eHecK8Yb4wfxgfFggLhjo0oQ0pDMNCYeEwGt4QFglvDIuGxcLiYYnQhSXDhPCmsFR4c1g6vCUsE94alg1vC8uF5cNH7qsY3h5WCu8IK4d3hlXCu8KqYbWwelgjvDusGd4T1grvDWuH94Wlw/vDuuEDYb3wwbB++FDYIHw4bBg+EjYKHw0bh03CpmGzsHn4WNgifDxsGbYKW4dXhW3CJ8O24VNhYvh02C585ufx+xdkjT/xm/GksGfYK3wpfCn0/l45Nzovmhb9IDo/uiC6MPphdFH0o2h6dHF0SXRpdFl0eXRFdGV0VXR1dE10bXRddH10Q3Rj1Psa2cChE0465QIX47K5WJfd5XBXuZzuapfLXeMi7loX565zud31Lo/L6/K5/C7eFXAFnXbGWUcudIVcYRd1N7gi7kZX1BVzxV0J51xJl+CaueauuWvhHnctXSvX2j3hnnBPuifdU+4p97Rr555x7d3fXAf3rOvonnPPueddZ9fFdXUvuG5uXK4Ln8kk18v1cr1db9fX9XX9XX83wA1wA91Al+yS3WA32A1xQ9xQN9QNc8PcCDfCjXQj3Sg3yo1xY1yKS3Hj3Xg3wU1wE91EN9lNdqku1U1z09x0N91VmnHhVWa72W6um+vSXJqb7zLPGRe6RW6RS3fpbolb4pa5ZW6FW+FWuVVujVvj1rl1boPb4Da5TW6L2+K2uW1uh9vhdrqdbpe/5sKkbq/b5/a5/W6/O+C+dBnuK3fQfe0OuW/cYfetO+K+c0fdMXfcfe9OuB/cSXfKnXZn3Fn3ozvnfnLnnXcpkXGR8ZG3IxMi70QmRiZFJkemRFIjUyPTIu9GpkdmRGZG3ovMirwfmR2ZE5kbmRdJi3wQmR9ZEFkY+TCyKPJRJD2yOLIksjSyLLI84n2BLaEv5Av7qL/BF/E3+qK+mC/uS3jnS/oEf5MvdaHudO9v9WX9bb6cL+8r+Ed9Y9/EN/XNfHP/mG/hH/ctfSvf2j/h2/gnfVv/lE/0T/t2/hnf3v/Nd/DP+o7+Od/JP+87+y6+q3/Bd/Mv+u6+h0/yPX0v/5Lv7fv4vr6f7+9f9gP8K36gf9Un+0F+sH/ND/Gv+6H+DT/MD/cjYt70I7MukWGsT/Hj/Hj/tp/g3/ET/SQ/2U/xqX6qn+bf9dP9DD/Tv+dn+ff9bD/Hz/XzfJr/wM/3C/xC/6Ff5D/y6X5x1s1Nv8Kv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/Df+x3+k/8Lr/b7/Gf+r3+M7/Pf+73+y/8Af+lz/Bf+YP+a3/If+MP+2/9Ef+dP+qP+eP+e3/C/+BP+lP+tD/jz/of/Tn/kz/P/2eNMcYYY+xfMu7Sovj1yIXb+T1/J0f8YuVeAHD11vwZvxzPPKNcl+fCch8RH5v58+kenR7KelStmpSUdHHddAlB4TkAWd8EZfr5K/KL8WJoDU9CIrSCUr9bfx/R5Sz9k/mjtwLk+EVOZkFZ8aX5PwfApN9sbx/x2BMj5pcNT8f9X+afA1C08KWc7HApXgytf76/0gpK/w/1523xT+rP/kUKQMtf5OSES/Gl+hPgcXgGEn+1JmOMMcYYY4wxdkEfUaFD1vVn1r/4/L3r83h1KScbXIr/2fU5Y4wxxhhjjDHGLr9nu3R96rHExFYd/v2Fyv+rrH95oRH8VTP/qQuoLnMZCgD+lAm9B8h6JnPSPzghQOaC/Gt3QvZfPbP5P7LDky9+dP5xaNkZH8Blf0Nmv1jdH57wMv5SYowxxhhjjP0lLp30//p5dbkKYowxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGrkD/iT9Ldrm3kTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLvc/k8AAAD//y4o7Ww=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1m9.699286668s ago: executing program 2 (id=801): io_setup(0x66, &(0x7f0000000400)=0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, r1, &(0x7f00000000c0)='-5', 0x12, 0x0, 0x0, 0x4}]) 1m9.589688131s ago: executing program 2 (id=806): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000180)='./sys/kernel/config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) 1m9.478551854s ago: executing program 2 (id=809): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000200)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4094) 54.138502417s ago: executing program 33 (id=809): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000200)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4094) 27.831853354s ago: executing program 5 (id=1965): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 27.754346416s ago: executing program 5 (id=1967): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000000400)="96", 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000340)=""/35, &(0x7f0000000080)=0x23) 27.729877717s ago: executing program 5 (id=1969): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x2, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f000001fcc0)={'syztnl1\x00', &(0x7f000001fc40)={'ip6gre0\x00', r1, 0x2f, 0x6, 0x74, 0x101, 0x40, @dev={0xfe, 0x80, '\x00', 0x42}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x8, 0x401}}) 27.645993949s ago: executing program 5 (id=1970): syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000300)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1528, &(0x7f00000021c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) 27.585266391s ago: executing program 5 (id=1972): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/rcu_expedited', 0x101a02, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x7, r0, 0x0, 0x7, 0x0) 27.482110743s ago: executing program 5 (id=1975): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'geneve0\x00', {0x1}, 0x108}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x0, 'veth0_vlan\x00', {0x804}, 0x5}) 27.423249804s ago: executing program 34 (id=1975): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'geneve0\x00', {0x1}, 0x108}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x0, 'veth0_vlan\x00', {0x804}, 0x5}) 7.972270081s ago: executing program 4 (id=2659): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x40, &(0x7f0000000240)={[{@errors_remount}, {@mblk_io_submit}, {@grpjquota}, {@grpid}, {@quota}]}, 0x5, 0x4f7, &(0x7f0000000cc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 7.670542078s ago: executing program 4 (id=2665): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r1, 0x4068aea3, &(0x7f00000001c0)={0xd5, 0x0, 0x1}) 7.550554981s ago: executing program 4 (id=2669): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00', 0x7012}) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0], 0x6e8a) 7.519735082s ago: executing program 4 (id=2673): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000300)={@mcast2, 0x1, r1}) 7.493204273s ago: executing program 4 (id=2675): r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 7.447686274s ago: executing program 4 (id=2681): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x2}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.069890953s ago: executing program 7 (id=2841): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x3, 0x7ffc0001}]}) ftruncate(r0, 0xa) 1.053250343s ago: executing program 7 (id=2842): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}}, 0x0) 947.704326ms ago: executing program 7 (id=2845): mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 908.481897ms ago: executing program 7 (id=2846): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='map_files\x00') getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 865.533608ms ago: executing program 7 (id=2849): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x80082102, &(0x7f0000000080)={0x0, 0x3, 0xffffffffffffffff, 0x3, 0x80000}) 297.491562ms ago: executing program 1 (id=2866): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x20000) 274.653943ms ago: executing program 6 (id=2868): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file2\x00', 0x1900001, 0x0, 0x1, 0x0, 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00') 260.156083ms ago: executing program 6 (id=2869): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000002c0)=@ipv4_newroute={0x20, 0x1a, 0x1, 0x4, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_METRICS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 252.032353ms ago: executing program 1 (id=2870): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) 238.282174ms ago: executing program 6 (id=2871): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x440a0}, 0x40004) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) 215.036674ms ago: executing program 1 (id=2873): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)={0x6, 0x7, 0x4, 0x3, 0xffffffff}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) 193.941575ms ago: executing program 0 (id=2874): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x2000}}, 0x1c}}, 0x80) 162.340946ms ago: executing program 0 (id=2875): setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) getgroups(0x3, &(0x7f0000000080)=[0xee00, 0xee00, 0xffffffffffffffff]) setregid(0x0, r0) 162.020406ms ago: executing program 1 (id=2876): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x80000000) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8901, &(0x7f0000000000)) 158.589586ms ago: executing program 6 (id=2877): setreuid(0xee01, 0xee01) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000004000200040010000800014004000000", 0x58}], 0x1) 149.900646ms ago: executing program 0 (id=2878): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1b, &(0x7f0000000600)=0xdfa, 0x4) 122.517967ms ago: executing program 6 (id=2879): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 116.476537ms ago: executing program 0 (id=2880): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xefb2, 0x6}, {0xff, 0x2}, 0x0, 0x1}}, @TCA_TBF_RTAB={0x1a6, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x0, 0xffffefff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0xfffffffd, 0x400000, 0x3, 0xfffffff0, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000000, 0x1, 0x0, 0x9, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb484, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x200000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0xffffffff, 0x200, 0x0, 0x0, 0xb3c, 0x400, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x6c4e, 0x0, 0x0, 0x0, 0x4, 0x445, 0x0, 0x0, 0x9, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x5, 0x2000, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x7, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0xfffffffd, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0x4000000, 0x1, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4804}, 0x0) 116.303657ms ago: executing program 1 (id=2881): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x40, 0xfffff010}, {0x20, 0x0, 0x0, 0xbffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newchain={0x3b, 0x64, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xe}, {0xfff2, 0xffe0}, {0xc, 0xfff3}}}, 0xffcc}}, 0x4090) 82.555347ms ago: executing program 6 (id=2882): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x5c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3d, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x0, 0xb, 0x10}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x0, 0xa, 0x22}, @TCA_FQ_CODEL_CE_THRESHOLD, @TCA_FQ_CODEL_LIMIT={0x0, 0x2, 0xbde1}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2, 0x0, 0x80000001, 0x4}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) 58.894348ms ago: executing program 0 (id=2883): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00010000000080fbdbdf250aa780"], 0x2c}}, 0x20000050) 32.248399ms ago: executing program 0 (id=2884): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x7, 0x80800) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, &(0x7f0000000080)) 31.939089ms ago: executing program 1 (id=2885): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x1, 0x400, 0xfffc}, 0x20) 0s ago: executing program 7 (id=2886): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x1e1000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) kernel console output (not intermixed with test programs): android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627179e019 code=0x7ffc0000 [ 61.049437][ T1573] microsoft 0003:045E:07DA.0011: no inputs found [ 61.060229][ T1573] microsoft 0003:045E:07DA.0011: could not initialize ff, continuing anyway [ 61.071937][ T28] audit: type=1326 audit(1787008705.624:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2597 comm="syz.4.1012" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627179e019 code=0x7ffc0000 [ 61.099084][ T1573] usb 1-1: USB disconnect, device number 7 [ 61.111723][ T2608] tipc: Enabling of bearer rejected, failed to enable media [ 61.182313][ T2609] fido_id[2609]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 61.356112][ T2634] loop4: detected capacity change from 0 to 256 [ 61.405364][ T2634] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 61.614480][ T2652] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 61.706140][ T19] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 61.886135][ T2685] netlink: 8952 bytes leftover after parsing attributes in process `syz.5.1053'. [ 61.895333][ T2685] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1053'. [ 61.915692][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 61.923740][ T19] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 61.945929][ T19] usb 5-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 61.978160][ T19] usb 5-1: Product: syz [ 61.982391][ T19] usb 5-1: Manufacturer: syz [ 62.002338][ T19] usb 5-1: SerialNumber: syz [ 62.026905][ T19] usb 5-1: config 0 descriptor?? [ 62.035522][ T19] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 62.240844][ T19] usb 5-1: USB disconnect, device number 6 [ 62.751486][ T2475] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 65.530568][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 65.530586][ T28] audit: type=1400 audit(1787008710.273:354): avc: denied { setattr } for pid=2704 comm="syz.1.1063" name="NETLINK" dev="sockfs" ino=24797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 65.745461][ T2732] loop5: detected capacity change from 0 to 512 [ 65.761772][ T2732] EXT4-fs: Ignoring removed oldalloc option [ 65.767757][ T2732] EXT4-fs: Ignoring removed i_version option [ 65.782803][ T2732] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.807880][ T2732] EXT4-fs (loop5): orphan cleanup on readonly fs [ 65.815715][ T2732] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1075: invalid indirect mapped block 4294967295 (level 1) [ 65.830097][ T2732] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1075: invalid indirect mapped block 4294967295 (level 1) [ 65.845895][ T2732] EXT4-fs (loop5): 2 truncates cleaned up [ 65.852178][ T2732] EXT4-fs mount: 3 callbacks suppressed [ 65.852194][ T2732] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 65.892318][ T872] EXT4-fs (loop5): unmounting filesystem. [ 65.912601][ T2730] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.920904][ T1573] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 65.927218][ T2730] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.936097][ T2730] device bridge_slave_0 entered promiscuous mode [ 65.943129][ T2747] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1079'. [ 65.948621][ T2730] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.960128][ T2730] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.967878][ T2730] device bridge_slave_1 entered promiscuous mode [ 66.078063][ T2730] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.085192][ T2730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.092552][ T2730] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.099607][ T2730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.113398][ T1573] usb 5-1: unable to get BOS descriptor or descriptor too short [ 66.124140][ T1573] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.130391][ T2759] loop1: detected capacity change from 0 to 256 [ 66.151968][ T2761] loop5: detected capacity change from 0 to 512 [ 66.158413][ T1573] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.171611][ T2761] EXT4-fs: Ignoring removed orlov option [ 66.176707][ T1818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.185972][ T2761] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 66.192098][ T1573] usb 5-1: config 1 has no interface number 0 [ 66.197279][ T1818] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.208125][ T1818] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.215743][ T1573] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 66.228521][ T2759] FAT-fs (loop1): Directory bread(block 64) failed [ 66.238120][ T1573] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.240882][ T2759] FAT-fs (loop1): Directory bread(block 65) failed [ 66.246927][ T1573] usb 5-1: Product: syz [ 66.255272][ T2761] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.1084: bad orphan inode 4 [ 66.257901][ T1573] usb 5-1: Manufacturer: syz [ 66.269303][ T1818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.272021][ T2759] FAT-fs (loop1): Directory bread(block 66) failed [ 66.280796][ T1818] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.287627][ T1573] usb 5-1: SerialNumber: syz [ 66.293279][ T1818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.294312][ T1818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.298217][ T2761] EXT4-fs (loop5): Remounting filesystem read-only [ 66.305902][ T1818] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.323723][ T2759] FAT-fs (loop1): Directory bread(block 67) failed [ 66.326800][ T1818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.346306][ T2761] EXT4-fs (loop5): 1 orphan inode deleted [ 66.352295][ T2759] FAT-fs (loop1): Directory bread(block 68) failed [ 66.359129][ T2761] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 66.363979][ T2759] FAT-fs (loop1): Directory bread(block 69) failed [ 66.376747][ T2759] FAT-fs (loop1): Directory bread(block 70) failed [ 66.383390][ T2759] FAT-fs (loop1): Directory bread(block 71) failed [ 66.392097][ T2759] FAT-fs (loop1): Directory bread(block 72) failed [ 66.399334][ T1818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.407213][ T2759] FAT-fs (loop1): Directory bread(block 73) failed [ 66.414269][ T1818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.422379][ T2761] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #2: block 4: comm syz.5.1084: lblock 0 mapped to illegal pblock 4 (length 1) [ 66.436570][ T28] audit: type=1400 audit(1787008711.148:355): avc: denied { create } for pid=2760 comm="syz.5.1084" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 66.479095][ T2761] EXT4-fs (loop5): Remounting filesystem read-only [ 66.499921][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.508727][ T872] EXT4-fs (loop5): unmounting filesystem. [ 66.521755][ T2730] device veth0_vlan entered promiscuous mode [ 66.537796][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.555135][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.575555][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.594476][ T43] device bridge_slave_1 left promiscuous mode [ 66.603599][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.621741][ T43] device bridge_slave_0 left promiscuous mode [ 66.636233][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.646350][ T43] device veth1_macvtap left promiscuous mode [ 66.652494][ T43] device veth0_vlan left promiscuous mode [ 66.771811][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.781391][ T2730] device veth1_macvtap entered promiscuous mode [ 66.792443][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.812828][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.834356][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.843252][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.864424][ T28] audit: type=1400 audit(1787008711.596:356): avc: denied { mount } for pid=2730 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.954828][ T298] usb 5-1: USB disconnect, device number 7 [ 67.002358][ T28] audit: type=1400 audit(1787008711.735:357): avc: denied { accept } for pid=2789 comm="syz.1.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.050670][ T28] audit: type=1326 audit(1787008711.785:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2793 comm="syz.0.1099" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca499e019 code=0x7ffc0000 [ 67.084511][ T28] audit: type=1326 audit(1787008711.805:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2793 comm="syz.0.1099" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca499e019 code=0x7ffc0000 [ 67.110475][ T28] audit: type=1326 audit(1787008711.805:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2793 comm="syz.0.1099" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca499e019 code=0x7ffc0000 [ 67.137146][ T28] audit: type=1326 audit(1787008711.805:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2793 comm="syz.0.1099" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca499e019 code=0x7ffc0000 [ 67.184680][ T28] audit: type=1326 audit(1787008711.805:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2793 comm="syz.0.1099" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7faca499e019 code=0x7ffc0000 [ 67.234970][ T28] audit: type=1326 audit(1787008711.815:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2793 comm="syz.0.1099" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca499e019 code=0x7ffc0000 [ 67.280070][ T2813] device macsec1 entered promiscuous mode [ 67.280090][ T2813] device vlan1 entered promiscuous mode [ 67.292002][ T2813] device vlan1 left promiscuous mode [ 67.303798][ T2816] netlink: 'syz.1.1109': attribute type 1 has an invalid length. [ 67.330954][ T2818] incfs: Can't find or create .index dir in ./file0 [ 67.337985][ T2818] incfs: mount failed -22 [ 67.357372][ T2820] loop6: detected capacity change from 0 to 512 [ 67.429757][ T2820] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 67.437701][ T2820] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 67.449482][ T2820] System zones: 0-1, 15-15, 18-18, 34-34 [ 67.465842][ T2820] EXT4-fs (loop6): orphan cleanup on readonly fs [ 67.472766][ T2820] EXT4-fs warning (device loop6): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 67.508661][ T2820] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 67.516548][ T2820] EXT4-fs (loop6): 1 truncate cleaned up [ 67.522487][ T2820] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 67.540182][ T2820] fscrypt (loop6, inode 16): Error -61 getting encryption context [ 67.548917][ T2820] fscrypt (loop6, inode 16): Error -61 getting encryption context [ 67.566861][ T2730] EXT4-fs (loop6): unmounting filesystem. [ 67.609119][ T2849] loop6: detected capacity change from 0 to 256 [ 67.631534][ T2849] exfat: Deprecated parameter 'utf8' [ 67.650703][ T2853] can0: slcan on ptm0. [ 67.663881][ T2849] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 67.710790][ T2852] can0 (unregistered): slcan off ptm0. [ 67.721486][ T2849] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 67.783713][ T2867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1132'. [ 67.823295][ T2867] netlink: 'syz.1.1132': attribute type 1 has an invalid length. [ 68.030136][ T2899] binder: 2898:2899 ioctl c0306201 200000000000 returned -22 [ 68.141716][ T2915] loop6: detected capacity change from 0 to 256 [ 68.553801][ T2953] loop5: detected capacity change from 0 to 8192 [ 68.615355][ T2953] loop5: p1 p2 p4[EZD] [ 68.635115][ T2953] loop5: p4 start 201326592 is beyond EOD, truncated [ 68.645778][ T2918] loop1: detected capacity change from 0 to 40427 [ 68.665316][ T2918] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 68.711608][ T2918] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 68.735423][ T2918] F2FS-fs (loop1): Image doesn't support compression [ 68.759415][ T640] udevd[640]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 68.771305][ T2918] F2FS-fs (loop1): Image doesn't support compression [ 68.788182][ T639] udevd[639]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 68.813835][ T2918] F2FS-fs (loop1): invalid crc value [ 68.823809][ T2918] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 68.934442][ T2918] F2FS-fs (loop1): Start checkpoint disabled! [ 68.934826][ T2918] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 68.949985][ T2918] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 68.950014][ T2918] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 69.046492][ T308] kworker/u4:3: attempt to access beyond end of device [ 69.046492][ T308] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 69.211373][ T2851] loop4: detected capacity change from 0 to 131072 [ 69.256105][ T2851] F2FS-fs (loop4): invalid crc value [ 69.303890][ T3012] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1188'. [ 69.314257][ T2851] F2FS-fs (loop4): Found nat_bits in checkpoint [ 69.419874][ T2851] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 69.478063][ T2851] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 69.716420][ T3049] netlink: 'syz.0.1204': attribute type 16 has an invalid length. [ 69.770172][ T3049] netlink: 'syz.0.1204': attribute type 2 has an invalid length. [ 69.788111][ T3015] loop5: detected capacity change from 0 to 40427 [ 69.804957][ T3049] netlink: 64102 bytes leftover after parsing attributes in process `syz.0.1204'. [ 69.815201][ T3015] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 69.831481][ T3015] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 69.851891][ T3015] F2FS-fs (loop5): Image doesn't support compression [ 69.858733][ T3015] F2FS-fs (loop5): Image doesn't support compression [ 69.881161][ T3015] F2FS-fs (loop5): invalid crc value [ 69.921790][ T3015] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 70.031213][ T3015] F2FS-fs (loop5): Start checkpoint disabled! [ 70.054686][ T3015] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 70.088297][ T3015] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 70.104227][ T3015] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 70.227637][ T8] kworker/u4:0: attempt to access beyond end of device [ 70.227637][ T8] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 70.505729][ T3079] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 70.523425][ T3079] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 70.532193][ T3079] F2FS-fs (loop4): invalid crc value [ 70.564444][ T3079] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 70.642661][ T3079] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 70.653343][ T3079] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 70.861924][ T3117] set_capacity_and_notify: 1 callbacks suppressed [ 70.861944][ T3117] loop4: detected capacity change from 0 to 256 [ 70.926231][ T3117] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.982857][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 70.982873][ T28] audit: type=1400 audit(1787008715.687:413): avc: denied { setopt } for pid=3119 comm="syz.6.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.090595][ T28] audit: type=1400 audit(1787008715.727:414): avc: denied { map } for pid=3121 comm="syz.4.1236" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 71.154933][ T28] audit: type=1400 audit(1787008715.856:415): avc: denied { rename } for pid=3130 comm="syz.0.1240" name="file0" dev="tmpfs" ino=1488 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 71.240789][ T3137] bridge_slave_0: default FDB implementation only supports local addresses [ 71.328041][ T3142] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1245'. [ 71.423971][ T3158] xt_hashlimit: size too large, truncated to 1048576 [ 71.463555][ T3089] loop1: detected capacity change from 0 to 131072 [ 71.497056][ T3089] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945) [ 71.537509][ T3089] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 71.570437][ T3089] F2FS-fs (loop1): invalid crc value [ 71.614129][ T3089] F2FS-fs (loop1): Found nat_bits in checkpoint [ 71.676933][ T28] audit: type=1400 audit(1787008716.384:416): avc: denied { setopt } for pid=3177 comm="syz.4.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 71.748757][ T3089] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 71.756217][ T3089] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 71.906518][ T3187] xt_hashlimit: size too large, truncated to 1048576 [ 72.570315][ T3211] loop1: detected capacity change from 0 to 40427 [ 72.585737][ T28] audit: type=1400 audit(1787008717.290:417): avc: denied { append } for pid=3216 comm="syz.0.1279" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 72.610318][ T3211] F2FS-fs (loop1): invalid crc value [ 72.633788][ T3211] F2FS-fs (loop1): Found nat_bits in checkpoint [ 72.750508][ T3211] F2FS-fs (loop1): Start checkpoint disabled! [ 72.773466][ T3211] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 72.790917][ T3211] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 72.835712][ T3161] loop5: detected capacity change from 0 to 131072 [ 72.868537][ T3209] loop6: detected capacity change from 0 to 40427 [ 72.871217][ T3161] F2FS-fs (loop5): Invalid segment/section count (458783, 24 x 150994945) [ 72.896213][ T3209] F2FS-fs (loop6): invalid crc value [ 72.921866][ T3211] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=81000000, run fsck to fix. [ 72.932584][ T3161] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 72.962552][ T3161] F2FS-fs (loop5): invalid crc value [ 72.968116][ T3209] F2FS-fs (loop6): Found nat_bits in checkpoint [ 72.999316][ T3161] F2FS-fs (loop5): Found nat_bits in checkpoint [ 73.076867][ T3161] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 73.084028][ T3161] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 73.118437][ T3209] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 73.188979][ T28] audit: type=1400 audit(1787008717.888:418): avc: denied { search } for pid=3262 comm="syz.4.1298" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 73.277310][ T2730] syz-executor: attempt to access beyond end of device [ 73.277310][ T2730] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 73.335676][ T3273] xt_hashlimit: size too large, truncated to 1048576 [ 73.576223][ T28] audit: type=1400 audit(1787008718.267:419): avc: denied { execute } for pid=3295 comm="syz.0.1314" path="/318/file1" dev="tmpfs" ino=1658 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.639097][ T3298] netlink: 'syz.6.1303': attribute type 1 has an invalid length. [ 73.663216][ T3298] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1303'. [ 74.060180][ T3338] loop6: detected capacity change from 0 to 512 [ 74.092014][ T3338] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 74.140434][ T3338] EXT4-fs (loop6): 1 truncate cleaned up [ 74.146145][ T3338] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 74.185118][ T3348] loop5: detected capacity change from 0 to 512 [ 74.192664][ T2730] EXT4-fs (loop6): unmounting filesystem. [ 74.225572][ T3348] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 74.260262][ T3348] EXT4-fs (loop5): 1 truncate cleaned up [ 74.270558][ T3348] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 74.302580][ T3362] loop4: detected capacity change from 0 to 256 [ 74.316725][ T3348] EXT4-fs warning (device loop5): verify_group_input:151: Cannot add at group 2 (only 1 groups) [ 74.404185][ T872] EXT4-fs (loop5): unmounting filesystem. [ 74.539085][ T3389] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1353'. [ 74.548279][ T3389] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1353'. [ 74.636023][ T3399] loop1: detected capacity change from 0 to 256 [ 74.661985][ T3404] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 74.676911][ T3399] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.738369][ T3411] usb usb9: usbfs: process 3411 (syz.5.1365) did not claim interface 12 before use [ 74.764429][ T28] audit: type=1400 audit(1787008719.462:420): avc: denied { write } for pid=3412 comm="syz.6.1366" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 74.867730][ T3425] loop1: detected capacity change from 0 to 128 [ 74.932460][ T3425] syz.1.1371: attempt to access beyond end of device [ 74.932460][ T3425] loop1: rw=2049, sector=194, nr_sectors = 56 limit=128 [ 75.011333][ T3439] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1379'. [ 75.020579][ T28] audit: type=1400 audit(1787008719.712:421): avc: denied { nlmsg_read } for pid=3438 comm="syz.6.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.047636][ T43] kworker/u4:2: attempt to access beyond end of device [ 75.047636][ T43] loop1: rw=1, sector=138, nr_sectors = 56 limit=128 [ 75.141261][ T28] audit: type=1326 audit(1787008719.841:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3448 comm="syz.5.1385" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76a19e019 code=0x7ffc0000 [ 75.249941][ T3461] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.312913][ T3461] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 75.348740][ T3474] xt_hashlimit: size too large, truncated to 1048576 [ 75.385561][ T3478] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1397'. [ 75.409923][ T3478] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1397'. [ 75.594256][ T3495] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 75.644070][ T3502] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 75.654186][ T3495] ext4 filesystem being mounted at /265/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.703248][ T3502] EXT4-fs (loop6): 1 truncate cleaned up [ 75.739777][ T3502] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 75.743929][ T3379] F2FS-fs (loop4): Invalid log sectorsize (0) [ 75.755384][ T3379] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 75.774647][ T3379] F2FS-fs (loop4): invalid crc value [ 75.783123][ T287] EXT4-fs (loop1): unmounting filesystem. [ 75.814263][ T2730] EXT4-fs (loop6): unmounting filesystem. [ 75.856785][ T3379] F2FS-fs (loop4): Found nat_bits in checkpoint [ 75.935006][ T3512] set_capacity_and_notify: 4 callbacks suppressed [ 75.935025][ T3512] loop6: detected capacity change from 0 to 512 [ 75.984900][ T3379] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 75.985707][ T3512] EXT4-fs (loop6): 1 truncate cleaned up [ 76.004093][ T3512] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 76.017288][ T3379] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 76.027029][ T3512] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.6.1412: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 76.064009][ T3512] EXT4-fs (loop6): Remounting filesystem read-only [ 76.088071][ T3518] loop1: detected capacity change from 0 to 1024 [ 76.119734][ T2730] EXT4-fs (loop6): unmounting filesystem. [ 76.201263][ T3518] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 76.236189][ T3518] EXT4-fs error (device loop1): ext4_lookup:1858: comm syz.1.1414: inode #12: comm syz.1.1414: iget: illegal inode # [ 76.318867][ T3518] EXT4-fs (loop1): Remounting filesystem read-only [ 76.368410][ T287] EXT4-fs (loop1): unmounting filesystem. [ 76.498408][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 76.498426][ T28] audit: type=1400 audit(1787008721.187:434): avc: denied { ioctl } for pid=3547 comm="syz.0.1428" path="socket:[27112]" dev="sockfs" ino=27112 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.614723][ T3564] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1435'. [ 76.731437][ T3576] loop5: detected capacity change from 0 to 1024 [ 76.763932][ T3582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1445'. [ 76.773296][ T3576] EXT4-fs: Ignoring removed bh option [ 76.839566][ T3576] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 76.850067][ T28] audit: type=1326 audit(1787008721.546:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3585 comm="syz.4.1417" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627179e019 code=0x7ffc0000 [ 76.880026][ T3594] loop6: detected capacity change from 0 to 512 [ 76.889277][ T28] audit: type=1326 audit(1787008721.546:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3585 comm="syz.4.1417" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627179e019 code=0x7ffc0000 [ 76.918127][ T28] audit: type=1326 audit(1787008721.546:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3585 comm="syz.4.1417" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f627179e019 code=0x7ffc0000 [ 76.943106][ T28] audit: type=1326 audit(1787008721.546:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3585 comm="syz.4.1417" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627179e019 code=0x7ffc0000 [ 76.966686][ T3594] EXT4-fs warning (device loop6): dx_probe:869: inode #2: comm syz.6.1449: Unimplemented hash flags: 0x0001 [ 76.979299][ T3594] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.1449: Corrupt directory, running e2fsck is recommended [ 76.992564][ T3594] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 77.000938][ T3594] EXT4-fs error (device loop6): ext4_iget_extra_inode:4765: inode #15: comm syz.6.1449: corrupted in-inode xattr [ 77.002812][ T28] audit: type=1326 audit(1787008721.546:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3585 comm="syz.4.1417" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627179e019 code=0x7ffc0000 [ 77.038870][ T3594] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.1449: couldn't read orphan inode 15 (err -117) [ 77.053800][ T28] audit: type=1326 audit(1787008721.566:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3585 comm="syz.4.1417" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f627179e019 code=0x7ffc0000 [ 77.081199][ T3594] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 77.081900][ T28] audit: type=1326 audit(1787008721.566:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3585 comm="syz.4.1417" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627179e019 code=0x7ffc0000 [ 77.115419][ T28] audit: type=1326 audit(1787008721.566:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3585 comm="syz.4.1417" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627179e019 code=0x7ffc0000 [ 77.116431][ T872] EXT4-fs (loop5): unmounting filesystem. [ 77.144037][ T3594] EXT4-fs (loop6): unmounting filesystem. [ 77.177238][ T19] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 77.239964][ T28] audit: type=1400 audit(1787008721.931:443): avc: denied { read write } for pid=3614 comm="syz.6.1458" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 77.309370][ T3622] loop4: detected capacity change from 0 to 256 [ 77.331021][ T3622] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 77.361909][ T19] usb 2-1: Using ep0 maxpacket: 32 [ 77.381458][ T19] usb 2-1: config index 0 descriptor too short (expected 31720, got 36) [ 77.396090][ T19] usb 2-1: config 0 has too many interfaces: 148, using maximum allowed: 32 [ 77.405001][ T19] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.439652][ T19] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 148 [ 77.468297][ T19] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 77.470225][ T3636] syz.6.1468 uses obsolete (PF_INET,SOCK_PACKET) [ 77.486278][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.504631][ T19] usb 2-1: Product: syz [ 77.513244][ T19] usb 2-1: Manufacturer: syz [ 77.523360][ T19] usb 2-1: SerialNumber: syz [ 77.543707][ T19] usb 2-1: config 0 descriptor?? [ 77.626235][ T3642] loop6: detected capacity change from 0 to 2048 [ 77.658175][ T3642] loop6: p1 < > p3 [ 77.666777][ T3642] loop6: p3 size 134217728 extends beyond EOD, truncated [ 77.760247][ T19] usb 2-1: USB disconnect, device number 7 [ 78.108012][ T3630] loop5: detected capacity change from 0 to 131072 [ 78.126109][ T3630] F2FS-fs (loop5): invalid crc value [ 78.152033][ T3634] loop4: detected capacity change from 0 to 131072 [ 78.164013][ T3634] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 78.164047][ T3630] F2FS-fs (loop5): Found nat_bits in checkpoint [ 78.177199][ T3634] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 78.185868][ T3634] F2FS-fs (loop4): invalid crc value [ 78.209136][ T3665] loop6: detected capacity change from 0 to 2048 [ 78.232825][ T3634] F2FS-fs (loop4): Found nat_bits in checkpoint [ 78.276594][ T3665] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 78.289653][ T3665] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.317912][ T3630] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 78.381937][ T3630] F2FS-fs (loop5): Corrupted max_depth of 3: 16842753 [ 78.382515][ T3634] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 78.396316][ T3634] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 78.405612][ T2730] EXT4-fs (loop6): unmounting filesystem. [ 78.420302][ T3630] F2FS-fs (loop5): sanity_check_inode: corrupted inode i_blocks i_ino=8 iblocks=0, run fsck to fix. [ 78.789987][ T3711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1501'. [ 78.802906][ T3711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1501'. [ 79.039726][ T3735] loop4: detected capacity change from 0 to 256 [ 79.156677][ T3754] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 79.170824][ T3754] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1519: invalid indirect mapped block 256 (level 2) [ 79.197054][ T3754] EXT4-fs (loop4): 2 truncates cleaned up [ 79.208302][ T3754] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 79.272302][ T291] EXT4-fs (loop4): unmounting filesystem. [ 79.394310][ T3778] netlink: 'syz.0.1530': attribute type 2 has an invalid length. [ 79.593576][ T3804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1541'. [ 79.603013][ T3804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 79.723307][ T3813] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.745531][ T3813] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.766952][ T3813] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 79.810853][ T3813] EXT4-fs (loop4): 1 truncate cleaned up [ 79.818657][ T3813] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 79.867150][ T291] EXT4-fs (loop4): unmounting filesystem. [ 79.935154][ T19] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 80.099002][ T3847] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 80.113492][ T3853] FAT-fs (loop5): Directory bread(block 64) failed [ 80.120311][ T3847] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.131821][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 80.137556][ T3853] FAT-fs (loop5): Directory bread(block 65) failed [ 80.144504][ T3853] FAT-fs (loop5): Directory bread(block 66) failed [ 80.151419][ T3767] F2FS-fs (loop6): invalid crc value [ 80.153122][ T19] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 80.157176][ T3853] FAT-fs (loop5): Directory bread(block 67) failed [ 80.172142][ T3853] FAT-fs (loop5): Directory bread(block 68) failed [ 80.178980][ T3853] FAT-fs (loop5): Directory bread(block 69) failed [ 80.185685][ T3853] FAT-fs (loop5): Directory bread(block 70) failed [ 80.192705][ T3853] FAT-fs (loop5): Directory bread(block 71) failed [ 80.199984][ T3767] F2FS-fs (loop6): Found nat_bits in checkpoint [ 80.206566][ T3853] FAT-fs (loop5): Directory bread(block 72) failed [ 80.213391][ T3853] FAT-fs (loop5): Directory bread(block 73) failed [ 80.222066][ T19] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 80.266480][ T3767] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 80.268409][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.288076][ T287] EXT4-fs (loop1): unmounting filesystem. [ 80.293060][ T19] usb 1-1: Product: syz [ 80.309231][ T19] usb 1-1: Manufacturer: syz [ 80.316580][ T19] usb 1-1: SerialNumber: syz [ 80.327780][ T3853] syz.5.1564: attempt to access beyond end of device [ 80.327780][ T3853] loop5: rw=2049, sector=1224, nr_sectors = 608 limit=256 [ 80.342086][ T19] r8152-cfgselector 1-1: config 0 descriptor?? [ 80.363966][ T3853] syz.5.1564: attempt to access beyond end of device [ 80.363966][ T3853] loop5: rw=2049, sector=1864, nr_sectors = 544 limit=256 [ 80.435986][ T3868] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 80.669757][ T3885] exfat: Deprecated parameter 'utf8' [ 80.676577][ T3885] exfat: Deprecated parameter 'namecase' [ 80.683066][ T3885] exfat: Deprecated parameter 'namecase' [ 80.688820][ T3885] exfat: Deprecated parameter 'utf8' [ 80.719390][ T3885] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 80.732698][ T3886] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 80.756635][ T19] r8152-cfgselector 1-1: Unknown version 0x0000 [ 80.771424][ T19] r8152-cfgselector 1-1: bad CDC descriptors [ 80.803410][ T2730] EXT4-fs (loop6): unmounting filesystem. [ 80.822781][ T19] r8152-cfgselector 1-1: Unknown version 0x0000 [ 80.869966][ T19] r8152-cfgselector 1-1: USB disconnect, device number 8 [ 80.972350][ T3899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1584'. [ 81.006202][ T3903] set_capacity_and_notify: 8 callbacks suppressed [ 81.006222][ T3903] loop5: detected capacity change from 0 to 512 [ 81.039604][ T3903] EXT4-fs: Ignoring removed oldalloc option [ 81.054307][ T3903] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 81.087421][ T3903] EXT4-fs (loop5): 1 truncate cleaned up [ 81.103475][ T3903] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 81.148397][ T872] EXT4-fs (loop5): unmounting filesystem. [ 81.164627][ T3862] loop1: detected capacity change from 0 to 131072 [ 81.191767][ T3862] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 81.212541][ T3862] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 81.231363][ T3862] F2FS-fs (loop1): invalid crc value [ 81.255216][ T3862] F2FS-fs (loop1): Found nat_bits in checkpoint [ 81.277347][ T3918] loop5: detected capacity change from 0 to 512 [ 81.310604][ T3918] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1591: invalid indirect mapped block 256 (level 2) [ 81.336204][ T3918] EXT4-fs (loop5): 2 truncates cleaned up [ 81.357659][ T3923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1593'. [ 81.366868][ T3918] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 81.376267][ T3862] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 81.383973][ T3862] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 81.457608][ T3911] loop4: detected capacity change from 0 to 40427 [ 81.462742][ T872] EXT4-fs (loop5): unmounting filesystem. [ 81.478188][ T3911] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 81.486105][ T3911] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 81.491366][ T40] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 81.515114][ T40] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 81.526305][ T3911] F2FS-fs (loop4): invalid crc value [ 81.550189][ T3911] F2FS-fs (loop4): Found nat_bits in checkpoint [ 81.604672][ T3937] process 'syz.0.1597' launched '/dev/net/tun' with NULL argv: empty string added [ 81.614570][ T3931] fido_id[3931]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 81.647283][ T3911] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 81.661405][ T3911] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 81.779453][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 81.779470][ T28] audit: type=1326 audit(1787008726.458:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.5.1606" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76a19e019 code=0x7ffc0000 [ 81.894231][ T28] audit: type=1326 audit(1787008726.498:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.5.1606" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76a19e019 code=0x7ffc0000 [ 81.937251][ T28] audit: type=1326 audit(1787008726.498:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.5.1606" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7fe76a19e019 code=0x7ffc0000 [ 81.985343][ T28] audit: type=1326 audit(1787008726.498:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.5.1606" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76a19e019 code=0x7ffc0000 [ 82.011325][ T3969] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1611'. [ 82.019437][ T28] audit: type=1326 audit(1787008726.498:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.5.1606" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76a19e019 code=0x7ffc0000 [ 82.047446][ T28] audit: type=1400 audit(1787008726.518:457): avc: denied { mount } for pid=3953 comm="syz.5.1607" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 82.099477][ T3975] netlink: 64098 bytes leftover after parsing attributes in process `syz.5.1615'. [ 82.339205][ T3983] loop1: detected capacity change from 0 to 40427 [ 82.354070][ T3983] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 82.369762][ T3983] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 82.378994][ T3983] F2FS-fs (loop1): invalid crc value [ 82.430740][ T3983] F2FS-fs (loop1): Found nat_bits in checkpoint [ 82.480123][ T3983] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 82.487210][ T3983] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 82.561244][ T28] audit: type=1400 audit(1787008727.248:458): avc: denied { ioctl } for pid=3982 comm="syz.1.1599" path="/306/file0/file0" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 82.780589][ T28] audit: type=1400 audit(1787008727.468:459): avc: denied { execute_no_trans } for pid=4007 comm="syz.6.1628" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.867714][ T4018] loop6: detected capacity change from 0 to 1024 [ 82.876075][ T4017] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 82.890677][ T4018] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.909567][ T4018] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 82.931822][ T4018] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 82.941705][ T4018] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 82.949935][ T4018] System zones: 0-1, 3-36 [ 82.955844][ T4018] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 82.982589][ T4024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1635'. [ 82.995018][ T2730] EXT4-fs (loop6): unmounting filesystem. [ 83.002492][ T4022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1635'. [ 83.040246][ T1573] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 83.070664][ T4030] loop4: detected capacity change from 0 to 512 [ 83.083378][ T4030] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 33619980: comm syz.4.1638: invalid block [ 83.096203][ T4030] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1638: invalid indirect mapped block 10 (level 1) [ 83.098376][ T4033] loop6: detected capacity change from 0 to 128 [ 83.111073][ T4030] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1638: invalid indirect mapped block 8 (level 1) [ 83.116930][ T40] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 83.131072][ T4030] EXT4-fs (loop4): 1 truncate cleaned up [ 83.142449][ T4030] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 83.157817][ T4030] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 213 vs 220 free clusters [ 83.175561][ T3986] loop5: detected capacity change from 0 to 131072 [ 83.184699][ T291] EXT4-fs (loop4): unmounting filesystem. [ 83.185856][ T3986] F2FS-fs (loop5): Test dummy encryption mode enabled [ 83.199789][ T3986] F2FS-fs (loop5): invalid crc value [ 83.230046][ T3986] F2FS-fs (loop5): Found nat_bits in checkpoint [ 83.240478][ T1573] usb 2-1: Using ep0 maxpacket: 16 [ 83.247385][ T1573] usb 2-1: unable to get BOS descriptor or descriptor too short [ 83.266723][ T1573] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 83.300389][ T1573] usb 2-1: config 5 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 83.327980][ T28] audit: type=1400 audit(1787008728.008:460): avc: denied { setattr } for pid=4043 comm="syz.6.1643" name="sda1" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 83.333003][ T3986] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 83.355300][ T1573] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 83.369263][ T40] usb 1-1: unable to get BOS descriptor or descriptor too short [ 83.385344][ T40] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.418951][ T4049] loop6: detected capacity change from 0 to 512 [ 83.425489][ T1573] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.434384][ T40] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 83.443675][ T1573] usb 2-1: Product: syz [ 83.447876][ T1573] usb 2-1: Manufacturer: syz [ 83.454185][ T40] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 83.471334][ T4049] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #13: comm syz.6.1645: iget: bad i_size value: 12154757448730 [ 83.488184][ T1573] usb 2-1: SerialNumber: syz [ 83.493010][ T40] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 83.493576][ T28] audit: type=1400 audit(1787008728.178:461): avc: denied { write } for pid=3985 comm="syz.5.1619" path="/284/file0/file0" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 83.508467][ T40] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 83.535205][ T4049] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.1645: couldn't read orphan inode 13 (err -117) [ 83.541641][ T40] usb 1-1: config 1 interface 1 has no altsetting 0 [ 83.561963][ T40] usb 1-1: string descriptor 0 read error: -22 [ 83.568240][ T40] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 83.570637][ T4049] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 83.587185][ T40] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.613044][ T2730] EXT4-fs (loop6): unmounting filesystem. [ 83.702032][ T4060] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.717674][ T4061] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 83.727994][ T4061] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.751290][ T2730] EXT4-fs (loop6): unmounting filesystem. [ 83.768624][ T4060] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 2: comm syz.4.1651: lblock 2 mapped to illegal pblock 2 (length 1) [ 83.835192][ T4060] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 48: comm syz.4.1651: lblock 0 mapped to illegal pblock 48 (length 1) [ 83.851558][ T4060] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.1651: Failed to acquire dquot type 0 [ 83.863204][ T4060] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 83.873208][ T4060] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #11: comm syz.4.1651: mark_inode_dirty error [ 83.884933][ T4060] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 83.895523][ T4060] EXT4-fs (loop4): 1 orphan inode deleted [ 83.902131][ T4060] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 83.910926][ T8] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 83.962441][ T4060] EXT4-fs error (device loop4): __ext4_get_inode_loc:4522: comm syz.4.1651: Invalid inode table block 1 in block_group 0 [ 83.975373][ T8] EXT4-fs error (device loop4): ext4_release_dquot:6864: comm kworker/u4:0: Failed to release dquot type 0 [ 83.988813][ T4060] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 84.015203][ T291] EXT4-fs (loop4): unmounting filesystem. [ 84.021425][ T291] EXT4-fs error (device loop4): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 84.027466][ T4076] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1656'. [ 84.037524][ T291] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 84.053799][ T291] EXT4-fs error (device loop4): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 84.115980][ T4085] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 84.136946][ T4085] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.1659: invalid indirect mapped block 32768 (level 2) [ 84.151062][ T4085] EXT4-fs (loop5): Remounting filesystem read-only [ 84.157800][ T4085] EXT4-fs (loop5): 1 orphan inode deleted [ 84.163808][ T4085] EXT4-fs (loop5): 1 truncate cleaned up [ 84.169716][ T4085] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 84.203192][ T40] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 84.212239][ T4085] EXT4-fs error (device loop5): ext4_search_dir:1549: inode #12: block 7: comm syz.5.1659: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 84.232224][ T1573] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 84.240506][ T1573] snd-usb-audio: probe of 2-1:5.0 failed with error -22 [ 84.242301][ T4085] EXT4-fs (loop5): Remounting filesystem read-only [ 84.252113][ T40] usb 1-1: USB disconnect, device number 9 [ 84.282078][ T872] EXT4-fs (loop5): unmounting filesystem. [ 84.473268][ T1573] usb 2-1: USB disconnect, device number 8 [ 84.671938][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 84.701606][ T639] udevd[639]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:5.1/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 84.736769][ T4158] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1693'. [ 84.857907][ T4171] FAT-fs (loop4): Directory bread(block 64) failed [ 84.870754][ T4171] FAT-fs (loop4): Directory bread(block 65) failed [ 84.880399][ T4171] FAT-fs (loop4): Directory bread(block 66) failed [ 84.893760][ T4171] FAT-fs (loop4): Directory bread(block 67) failed [ 84.900606][ T4171] FAT-fs (loop4): Directory bread(block 68) failed [ 84.907654][ T4171] FAT-fs (loop4): Directory bread(block 69) failed [ 84.915111][ T4171] FAT-fs (loop4): Directory bread(block 70) failed [ 84.925336][ T4171] FAT-fs (loop4): Directory bread(block 71) failed [ 84.932479][ T4171] FAT-fs (loop4): Directory bread(block 72) failed [ 84.939119][ T4171] FAT-fs (loop4): Directory bread(block 73) failed [ 85.064011][ T4191] FAT-fs (loop5): error, invalid access to FAT (entry 0x09000016) [ 85.084114][ T4191] FAT-fs (loop5): Filesystem has been set read-only [ 85.110502][ T4171] syz.4.1698: attempt to access beyond end of device [ 85.110502][ T4171] loop4: rw=2049, sector=1224, nr_sectors = 608 limit=256 [ 85.117288][ T4191] syz.5.1708: attempt to access beyond end of device [ 85.117288][ T4191] loop5: rw=0, sector=150995000, nr_sectors = 1 limit=128 [ 85.142279][ T4191] Buffer I/O error on dev loop5, logical block 150995000, async page read [ 85.151106][ T4191] FAT-fs (loop5): error, invalid access to FAT (entry 0x09000016) [ 85.169392][ T4191] FAT-fs (loop5): error, invalid access to FAT (entry 0x09000016) [ 85.178164][ T4171] syz.4.1698: attempt to access beyond end of device [ 85.178164][ T4171] loop4: rw=2049, sector=1864, nr_sectors = 544 limit=256 [ 85.185407][ T4191] FAT-fs (loop5): error, invalid access to FAT (entry 0x09000016) [ 85.214415][ T4191] FAT-fs (loop5): error, invalid access to FAT (entry 0x09000016) [ 85.228025][ T4191] syz.5.1708: attempt to access beyond end of device [ 85.228025][ T4191] loop5: rw=0, sector=150995000, nr_sectors = 1 limit=128 [ 85.263795][ T4191] Buffer I/O error on dev loop5, logical block 150995000, async page read [ 85.280860][ T4191] FAT-fs (loop5): error, invalid access to FAT (entry 0x09000016) [ 85.290170][ T4191] syz.5.1708: attempt to access beyond end of device [ 85.290170][ T4191] loop5: rw=0, sector=150995000, nr_sectors = 1 limit=128 [ 85.310063][ T4191] Buffer I/O error on dev loop5, logical block 150995000, async page read [ 85.477207][ T4239] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1734'. [ 85.491464][ T40] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 85.527107][ T4241] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 85.542631][ T4243] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 85.559087][ T4241] EXT4-fs (loop5): 1 truncate cleaned up [ 85.564915][ T4241] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 85.585694][ T4251] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1738'. [ 85.657314][ T872] EXT4-fs (loop5): unmounting filesystem. [ 85.684989][ T40] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.697553][ T40] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.715861][ T40] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 85.733164][ T4265] @0Ů: renamed from bond_slave_1 [ 85.735369][ T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 85.756290][ T40] usb 2-1: SerialNumber: syz [ 85.794235][ T40] usb 2-1: 0:2 : does not exist [ 85.879777][ T4291] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 85.929139][ T4295] xt_hashlimit: size too large, truncated to 1048576 [ 85.944516][ T4300] EXT4-fs (loop6): Test dummy encryption mode enabled [ 85.977891][ T6] usb 2-1: USB disconnect, device number 9 [ 86.012245][ T4300] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2750: inode #11: comm syz.6.1762: corrupted xattr block 95 [ 86.034703][ T4300] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.1762: bg 0: block 7: invalid block bitmap [ 86.065973][ T4300] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 86.102089][ T4300] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2916: inode #11: comm syz.6.1762: corrupted xattr block 95 [ 86.153539][ T4300] EXT4-fs warning (device loop6): ext4_evict_inode:301: xattr delete (err -117) [ 86.183643][ T4300] EXT4-fs (loop6): 1 orphan inode deleted [ 86.189626][ T4300] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 86.224267][ T2730] EXT4-fs (loop6): unmounting filesystem. [ 86.237153][ T4319] set_capacity_and_notify: 8 callbacks suppressed [ 86.237171][ T4319] loop4: detected capacity change from 0 to 256 [ 86.260496][ T4319] exfat: Deprecated parameter 'utf8' [ 86.279047][ T4319] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 86.426935][ T4343] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1781'. [ 86.441963][ T40] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 86.522450][ T4355] loop1: detected capacity change from 0 to 512 [ 86.550228][ T4355] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 86.603416][ T4360] loop5: detected capacity change from 0 to 256 [ 86.622638][ T4360] FAT-fs (loop5): Directory bread(block 64) failed [ 86.629222][ T4360] FAT-fs (loop5): Directory bread(block 65) failed [ 86.636177][ T4360] FAT-fs (loop5): Directory bread(block 66) failed [ 86.639164][ T4355] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.642845][ T4360] FAT-fs (loop5): Directory bread(block 67) failed [ 86.653738][ T40] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.658682][ T4360] FAT-fs (loop5): Directory bread(block 68) failed [ 86.677604][ T4360] FAT-fs (loop5): Directory bread(block 69) failed [ 86.684239][ T4360] FAT-fs (loop5): Directory bread(block 70) failed [ 86.690956][ T4360] FAT-fs (loop5): Directory bread(block 71) failed [ 86.697778][ T4360] FAT-fs (loop5): Directory bread(block 72) failed [ 86.699284][ T40] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 86.704781][ T4360] FAT-fs (loop5): Directory bread(block 73) failed [ 86.722561][ T40] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.730946][ T4355] EXT4-fs error (device loop1): ext4_quota_enable:7032: comm syz.1.1787: Bad quota inum: 2, type: 1 [ 86.751202][ T4355] EXT4-fs warning (device loop1): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 86.779171][ T40] usb 1-1: Product: syz [ 86.791043][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 86.791060][ T28] audit: type=1400 audit(1787008731.476:472): avc: denied { bind } for pid=4362 comm="syz.5.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 86.791470][ T40] usb 1-1: Manufacturer: syz [ 86.801939][ T28] audit: type=1400 audit(1787008731.486:473): avc: denied { connect } for pid=4362 comm="syz.5.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 86.819968][ T40] usb 1-1: SerialNumber: syz [ 86.865077][ T287] EXT4-fs (loop1): unmounting filesystem. [ 86.960492][ T309] kernel write not supported for file /stat (pid: 309 comm: kworker/0:3) [ 87.032003][ T4383] xt_CT: You must specify a L4 protocol and not use inversions on it [ 87.081049][ T40] usb 1-1: USB disconnect, device number 10 [ 87.118974][ T4389] loop5: detected capacity change from 0 to 512 [ 87.128931][ T4389] EXT4-fs: Ignoring removed nobh option [ 87.153930][ T4389] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 87.163013][ T4389] ext4 filesystem being mounted at /330/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.197016][ T4389] EXT4-fs: Ignoring sb option on remount [ 87.202876][ T4389] EXT4-fs: Cannot change quota options when quota turned on [ 87.218496][ T872] EXT4-fs (loop5): unmounting filesystem. [ 87.320079][ T4405] netlink: 216 bytes leftover after parsing attributes in process `syz.5.1808'. [ 87.333182][ T4405] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1808'. [ 87.358112][ T4349] loop4: detected capacity change from 0 to 131072 [ 87.375863][ T4349] F2FS-fs (loop4): invalid crc value [ 87.386502][ T28] audit: type=1400 audit(1787008732.076:474): avc: denied { setcheckreqprot } for pid=4409 comm="syz.5.1810" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 87.423058][ T4349] F2FS-fs (loop4): Found nat_bits in checkpoint [ 87.467610][ T4349] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 87.508521][ T4349] fscrypt (loop4, inode 3): Mutually exclusive encryption flags (0x0c) [ 87.888370][ T4415] loop5: detected capacity change from 0 to 131072 [ 87.898086][ T4415] F2FS-fs (loop5): invalid crc value [ 87.905172][ T4415] F2FS-fs (loop5): Found nat_bits in checkpoint [ 87.932706][ T6] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 87.942618][ T4415] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 87.957932][ T4415] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 87.973837][ T4415] F2FS-fs (loop5): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 88.075273][ T4444] loop5: detected capacity change from 0 to 256 [ 88.092849][ T4444] exfat: Deprecated parameter 'namecase' [ 88.118279][ T4444] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb94bd070, utbl_chksum : 0xe619d30d) [ 88.132736][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 88.138968][ T6] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 88.155762][ T6] usb 1-1: config 0 has no interface number 0 [ 88.161988][ T6] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 88.172265][ T6] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 88.184221][ T28] audit: type=1400 audit(1787008732.875:475): avc: denied { watch watch_reads } for pid=4443 comm="syz.5.1823" path="/338/file0/file0" dev="loop5" ino=1048740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.194260][ T6] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 88.269017][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.285802][ T6] usb 1-1: Product: syz [ 88.290073][ T6] usb 1-1: Manufacturer: syz [ 88.295444][ T6] usb 1-1: SerialNumber: syz [ 88.305027][ T6] usb 1-1: config 0 descriptor?? [ 88.313022][ T4420] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 88.322970][ T4420] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 88.531234][ T4448] loop4: detected capacity change from 0 to 40427 [ 88.544100][ T4448] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 88.554388][ T4420] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 88.561622][ T4420] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 88.570406][ T4448] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 88.588192][ T4448] F2FS-fs (loop4): invalid crc value [ 88.625215][ T4448] F2FS-fs (loop4): Found nat_bits in checkpoint [ 88.628185][ T4486] loop1: detected capacity change from 0 to 256 [ 88.641576][ T4486] exfat: Bad value for 'dmask' [ 88.695636][ T4448] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 88.699675][ T4493] loop1: detected capacity change from 0 to 512 [ 88.712667][ T4448] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 88.728553][ T4493] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 88.768592][ T4448] syz.4.1825: attempt to access beyond end of device [ 88.768592][ T4448] loop4: rw=2051, sector=36912, nr_sectors = 8144 limit=40427 [ 88.782896][ T4448] syz.4.1825: attempt to access beyond end of device [ 88.782896][ T4448] loop4: rw=2051, sector=45096, nr_sectors = 20440 limit=40427 [ 88.797085][ T6] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 88.812232][ T4448] F2FS-fs (loop4): Issue discard(4614, 4614, 1018) failed, ret: -5 [ 88.812286][ T4448] F2FS-fs (loop4): Issue discard(5637, 5637, 2555) failed, ret: -5 [ 88.919970][ T4504] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.008046][ T6] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 89.024282][ T6] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 89.044254][ T6] asix: probe of 1-1:0.34 failed with error -71 [ 89.055563][ T6] usb 1-1: USB disconnect, device number 11 [ 89.156124][ T4533] raw_sendmsg: syz.4.1864 forgot to set AF_INET. Fix it! [ 89.322892][ T28] audit: type=1400 audit(1787008734.005:476): avc: denied { ioctl } for pid=4551 comm="syz.4.1873" path="socket:[30253]" dev="sockfs" ino=30253 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.535945][ T4558] netlink: 'syz.6.1876': attribute type 1 has an invalid length. [ 89.625577][ T4564] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1880'. [ 89.666514][ T4564] netem: invalid attributes len -24 [ 89.678971][ T4564] netem: change failed [ 89.848695][ T4546] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945) [ 89.883938][ T4546] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 89.913330][ T4546] F2FS-fs (loop1): invalid crc value [ 89.948831][ T4546] F2FS-fs (loop1): Found nat_bits in checkpoint [ 90.034032][ T4546] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 90.051284][ T4546] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 90.223752][ T4586] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 90.231589][ T4586] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 90.243168][ T4554] F2FS-fs (loop4): Test dummy encryption mode enabled [ 90.254036][ T4586] F2FS-fs (loop5): invalid crc value [ 90.263313][ T4554] F2FS-fs (loop4): invalid crc value [ 90.279954][ T4586] F2FS-fs (loop5): Found nat_bits in checkpoint [ 90.294767][ T4554] F2FS-fs (loop4): Found nat_bits in checkpoint [ 90.403913][ T4554] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 90.423973][ T4586] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 90.439855][ T4586] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 90.516770][ T4586] syz.5.1889: attempt to access beyond end of device [ 90.516770][ T4586] loop5: rw=2051, sector=36912, nr_sectors = 8144 limit=40427 [ 90.533572][ T4586] syz.5.1889: attempt to access beyond end of device [ 90.533572][ T4586] loop5: rw=2051, sector=45096, nr_sectors = 20440 limit=40427 [ 90.568086][ T4586] F2FS-fs (loop5): Issue discard(4614, 4614, 1018) failed, ret: -5 [ 90.568140][ T4586] F2FS-fs (loop5): Issue discard(5637, 5637, 2555) failed, ret: -5 [ 90.695665][ T4618] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1900'. [ 90.821996][ T4630] netlink: 'syz.5.1906': attribute type 1 has an invalid length. [ 90.837388][ T4630] netlink: 'syz.5.1906': attribute type 2 has an invalid length. [ 90.909163][ T4640] netlink: 'syz.5.1911': attribute type 30 has an invalid length. [ 91.019025][ T4656] futex_wake_op: syz.5.1918 tries to shift op by 144; fix this program [ 91.041985][ T28] audit: type=1400 audit(1787008735.720:477): avc: denied { read } for pid=4657 comm="syz.1.1919" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 91.072308][ T4660] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.115833][ T4660] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 91.126144][ T4660] ext4 filesystem being mounted at /408/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.147894][ T291] EXT4-fs (loop4): unmounting filesystem. [ 91.201808][ T28] audit: type=1326 audit(1787008735.879:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4679 comm="syz.1.1929" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814139e019 code=0x7ffc0000 [ 91.228922][ T28] audit: type=1400 audit(1787008735.879:479): avc: denied { write } for pid=4683 comm="syz.5.1930" name="mnt" dev="proc" ino=30595 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lnk_file permissive=1 [ 91.257026][ T28] audit: type=1326 audit(1787008735.909:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4679 comm="syz.1.1929" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f814139e019 code=0x7ffc0000 [ 91.288033][ T28] audit: type=1326 audit(1787008735.909:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4679 comm="syz.1.1929" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814139e019 code=0x7ffc0000 [ 91.400887][ T4705] device bridge0 entered promiscuous mode [ 91.407220][ T4705] device macsec1 entered promiscuous mode [ 91.478816][ T4721] futex_wake_op: syz.0.1946 tries to shift op by 144; fix this program [ 91.555610][ T4734] set_capacity_and_notify: 4 callbacks suppressed [ 91.555627][ T4734] loop1: detected capacity change from 0 to 512 [ 91.579710][ T4734] EXT4-fs (loop1): 1 truncate cleaned up [ 91.598436][ T4734] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 91.616227][ T4734] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1953: bg 0: block 465: padding at end of block bitmap is not set [ 91.638405][ T4734] EXT4-fs (loop1): Remounting filesystem read-only [ 91.675545][ T287] EXT4-fs (loop1): unmounting filesystem. [ 91.712142][ T4743] loop5: detected capacity change from 0 to 4096 [ 91.761220][ T4743] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 91.822268][ T872] EXT4-fs (loop5): unmounting filesystem. [ 91.862842][ T4760] device ip6gretap0 entered promiscuous mode [ 91.924977][ T4766] netlink: 'syz.0.1968': attribute type 7 has an invalid length. [ 91.933627][ T4766] netlink: 'syz.0.1968': attribute type 8 has an invalid length. [ 91.976022][ T4770] loop5: detected capacity change from 0 to 256 [ 91.997021][ T4770] exfat: Deprecated parameter 'namecase' [ 92.006656][ T4770] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 92.027232][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 92.027249][ T28] audit: type=1400 audit(1787008736.709:498): avc: denied { mounton } for pid=4769 comm="syz.5.1970" path="/378/file0/file0" dev="loop5" ino=1048741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.084241][ T28] audit: type=1400 audit(1787008736.739:499): avc: denied { unlink } for pid=872 comm="syz-executor" name="file0" dev="loop5" ino=1048746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.475139][ T4751] loop1: detected capacity change from 0 to 131072 [ 92.489790][ T4751] F2FS-fs (loop1): Test dummy encryption mode enabled [ 92.509901][ T4751] F2FS-fs (loop1): invalid crc value [ 92.522924][ T4790] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.530317][ T4790] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.538122][ T4790] device bridge_slave_0 entered promiscuous mode [ 92.548415][ T4790] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.555939][ T4751] F2FS-fs (loop1): Found nat_bits in checkpoint [ 92.563482][ T4790] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.583076][ T4790] device bridge_slave_1 entered promiscuous mode [ 92.594997][ T40] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 92.665045][ T4751] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 92.714381][ T4797] loop4: detected capacity change from 0 to 40427 [ 92.735511][ T4797] F2FS-fs (loop4): invalid crc value [ 92.741550][ T4751] fscrypt: AES-256-XTS using blk-crypto-fallback [ 92.748789][ T1818] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.757187][ T4797] F2FS-fs (loop4): Found nat_bits in checkpoint [ 92.757461][ T1818] device bridge_slave_0 left promiscuous mode [ 92.770061][ T1818] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.779430][ T1818] device bridge0 left promiscuous mode [ 92.785276][ T40] usb 1-1: Using ep0 maxpacket: 16 [ 92.791788][ T40] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.827934][ T1818] device veth1_macvtap left promiscuous mode [ 92.840233][ T4797] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 92.863130][ T1818] device veth0_vlan left promiscuous mode [ 92.864517][ T40] usb 1-1: config 0 interface 0 has no altsetting 0 [ 92.877667][ T291] syz-executor: attempt to access beyond end of device [ 92.877667][ T291] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 92.942417][ T40] usb 1-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 92.983911][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.015196][ T40] usb 1-1: config 0 descriptor?? [ 93.115936][ T4790] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.123043][ T4790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.130519][ T4790] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.137604][ T4790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.171768][ T4810] loop4: detected capacity change from 0 to 512 [ 93.215491][ T4810] EXT4-fs error (device loop4): __ext4_iget:5104: inode #11: block 1: comm syz.4.1987: invalid block [ 93.239462][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.255860][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.263250][ T4810] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1987: couldn't read orphan inode 11 (err -117) [ 93.288132][ T4810] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 93.288919][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.336632][ T291] EXT4-fs (loop4): unmounting filesystem. [ 93.344220][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.353651][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.360750][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.369202][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.392743][ T4816] netlink: 'syz.4.1988': attribute type 3 has an invalid length. [ 93.393388][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.407626][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.431992][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.440341][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.451407][ T40] wacom 0003:056A:5000.0013: unknown main item tag 0x2 [ 93.465538][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.476929][ T40] wacom 0003:056A:5000.0013: ignoring exceeding usage max [ 93.482327][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.501875][ T40] wacom 0003:056A:5000.0013: ignoring exceeding usage max [ 93.503271][ T4790] device veth0_vlan entered promiscuous mode [ 93.517199][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.526103][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.542492][ T40] wacom 0003:056A:5000.0013: hidraw0: USB HID v0.05 Device [HID 056a:5000] on usb-dummy_hcd.0-1/input0 [ 93.543958][ T4790] device veth1_macvtap entered promiscuous mode [ 93.566234][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.574015][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.581851][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.590287][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.621739][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.644300][ T40] usb 1-1: USB disconnect, device number 12 [ 93.644790][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.675665][ T4823] fido_id[4823]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 93.678072][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.718903][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.735883][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.776681][ T639] I/O error, dev loop7, sector 5242752 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 93.799666][ T639] I/O error, dev loop7, sector 5242752 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.819194][ T639] Buffer I/O error on dev loop7p8, logical block 655344, async page read [ 93.915036][ T4807] loop6: detected capacity change from 0 to 131072 [ 93.925765][ T4807] F2FS-fs (loop6): Zoned block device path is missing [ 93.932896][ T4807] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 93.944041][ T4807] F2FS-fs (loop6): invalid crc value [ 93.967190][ T4807] F2FS-fs (loop6): Found nat_bits in checkpoint [ 93.993257][ T4834] loop4: detected capacity change from 0 to 512 [ 94.026053][ T4807] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 94.033213][ T4807] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 94.294530][ T4853] loop4: detected capacity change from 0 to 4096 [ 94.348838][ T4853] EXT4-fs: Ignoring removed oldalloc option [ 94.373210][ T4853] EXT4-fs (loop4): Test dummy encryption mode enabled [ 94.416368][ T4853] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c0a9, mo2=0002] [ 94.424546][ T4853] System zones: 0-5 [ 94.435133][ T4869] netlink: 'syz.0.2011': attribute type 1 has an invalid length. [ 94.584504][ T4889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2018'. [ 94.593792][ T4889] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 94.747154][ T4913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2030'. [ 94.818343][ T28] audit: type=1400 audit(1787008739.498:500): avc: denied { getopt } for pid=4922 comm="syz.1.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.893610][ T4933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2040'. [ 94.944971][ T4939] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2041'. [ 95.857190][ T5005] usb usb7: usbfs: process 5005 (syz.0.2075) did not claim interface 0 before use [ 96.035904][ T5038] loop4: detected capacity change from 0 to 512 [ 96.158731][ T5057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2100'. [ 96.261818][ T5066] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.273536][ T5066] EXT4-fs (loop4): 1 truncate cleaned up [ 96.279633][ T5066] EXT4-fs mount: 2 callbacks suppressed [ 96.279649][ T5066] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 96.304831][ T291] EXT4-fs (loop4): unmounting filesystem. [ 96.408540][ T5082] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 96.418177][ T5082] ext4 filesystem being mounted at /466/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.438437][ T291] EXT4-fs (loop4): unmounting filesystem. [ 96.767068][ T6] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 96.808372][ T639] I/O error, dev loop7, sector 5242752 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 96.818603][ T639] I/O error, dev loop7, sector 5242752 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.828574][ T639] Buffer I/O error on dev loop7p8, logical block 655344, async page read [ 96.948293][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 96.959804][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.969907][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 96.991159][ T6] usb 5-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 97.005902][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.021693][ T6] usb 5-1: config 0 descriptor?? [ 97.134578][ T5106] set_capacity_and_notify: 2 callbacks suppressed [ 97.134596][ T5106] loop1: detected capacity change from 0 to 40427 [ 97.158225][ T5106] F2FS-fs (loop1): invalid crc value [ 97.176530][ T5106] F2FS-fs (loop1): Found nat_bits in checkpoint [ 97.229485][ T5106] F2FS-fs (loop1): Start checkpoint disabled! [ 97.239156][ T5106] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 97.246582][ T5106] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 97.302043][ T8] kworker/u4:0: attempt to access beyond end of device [ 97.302043][ T8] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 97.411039][ T5128] loop1: detected capacity change from 0 to 1024 [ 97.422710][ T5128] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #3: block 3: comm syz.1.2131: lblock 3 mapped to illegal pblock 3 (length 1) [ 97.437796][ T5128] Quota error (device loop1): write_blk: dquota write failed [ 97.441199][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.445309][ T5128] Quota error (device loop1): find_free_dqentry: Can't write quota data block 3 [ 97.463950][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.472075][ T5128] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 97.482199][ T5128] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.2131: Failed to acquire dquot type 0 [ 97.493468][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.493497][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.509288][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.516312][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.521275][ T5128] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 3: comm syz.1.2131: lblock 3 mapped to illegal pblock 3 (length 1) [ 97.524932][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.542335][ T5131] loop6: detected capacity change from 0 to 1024 [ 97.545951][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.551844][ T5131] EXT4-fs: Ignoring removed nobh option [ 97.563079][ T5128] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 97.567196][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.574052][ T5131] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.579909][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.593032][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.595283][ T5128] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.2131: Failed to acquire dquot type 0 [ 97.600770][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.618538][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.625392][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.628172][ T5128] EXT4-fs error (device loop1): ext4_free_blocks:6220: comm syz.1.2131: Freeing blocks not in datazone - block = 0, count = 4096 [ 97.633036][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.652930][ T5128] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 3: comm syz.1.2131: lblock 3 mapped to illegal pblock 3 (length 1) [ 97.667592][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.675429][ T5131] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 97.684664][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.691777][ T5128] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 97.702363][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.709541][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.711831][ T5128] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.2131: Failed to acquire dquot type 0 [ 97.716275][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.734469][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.741549][ T4126] I/O error, dev loop7, sector 5242752 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 97.741577][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.758361][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.761112][ T5131] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, [ 97.765091][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.765097][ T5131] block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 97.770307][ T5131] EXT4-fs (loop6): Remounting filesystem read-only [ 97.777941][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.788221][ T4126] I/O error, dev loop7, sector 5242752 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 97.788631][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.795429][ T5128] EXT4-fs (loop1): 1 orphan inode deleted [ 97.801741][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.801768][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.801790][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.801812][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.801835][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.801856][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.837676][ T4126] Buffer I/O error on dev loop7p8, logical block 655344, async page read [ 97.844220][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.859985][ T5128] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 97.886564][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.895700][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.905923][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.912757][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.925402][ T6] nti 0003:0757:0A00.0014: unknown main item tag 0x0 [ 97.933610][ T6] nti 0003:0757:0A00.0014: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.4-1/input0 [ 97.944820][ T5128] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 3: comm syz.1.2131: lblock 3 mapped to illegal pblock 3 (length 1) [ 97.959741][ T2730] EXT4-fs (loop6): unmounting filesystem. [ 97.964661][ T6] usb 5-1: USB disconnect, device number 8 [ 97.974059][ T5128] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 97.978869][ T311] I/O error, dev loop7, sector 5242752 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 97.985620][ T5128] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.2131: Failed to acquire dquot type 0 [ 98.008310][ T311] I/O error, dev loop7, sector 5242752 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.037988][ T311] Buffer I/O error on dev loop7p8, logical block 655344, async page read [ 98.048153][ T287] EXT4-fs (loop1): unmounting filesystem. [ 98.065691][ T5139] fido_id[5139]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 98.091893][ T311] I/O error, dev loop7, sector 5242752 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 98.141497][ T311] I/O error, dev loop7, sector 5242752 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.177722][ T311] Buffer I/O error on dev loop7p8, logical block 655344, async page read [ 98.186231][ T28] audit: type=1326 audit(1787008742.866:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm="syz.6.2140" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe52959e019 code=0x7ffc0000 [ 98.226234][ T5158] netlink: 'syz.1.2144': attribute type 1 has an invalid length. [ 98.261235][ T639] Buffer I/O error on dev loop7p8, logical block 655344, async page read [ 98.279308][ T28] audit: type=1326 audit(1787008742.866:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm="syz.6.2140" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe52959e019 code=0x7ffc0000 [ 98.370307][ T5166] loop7: detected capacity change from 0 to 256 [ 98.380774][ T28] audit: type=1326 audit(1787008742.896:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm="syz.6.2140" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe52959e019 code=0x7ffc0000 [ 98.447136][ T5166] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2146'. [ 98.470526][ T5188] loop1: detected capacity change from 0 to 256 [ 98.478559][ T5166] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2146'. [ 98.489395][ T28] audit: type=1326 audit(1787008742.896:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm="syz.6.2140" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe52959e019 code=0x7ffc0000 [ 98.505404][ T5166] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2146'. [ 98.654547][ T5209] loop7: detected capacity change from 0 to 512 [ 98.724540][ T5209] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 98.738159][ T5209] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.783918][ T4790] EXT4-fs (loop7): unmounting filesystem. [ 98.789755][ T5224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2174'. [ 98.885758][ T5239] loop1: detected capacity change from 0 to 256 [ 99.047051][ T5259] bridge: RTM_DELNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 99.154701][ T5275] xt_hashlimit: size too large, truncated to 1048576 [ 99.194811][ T5277] ip_tables: iptables: counters copy to user failed while replacing table [ 99.386620][ T5302] loop4: detected capacity change from 0 to 256 [ 99.412951][ T5302] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 99.616980][ T5312] loop7: detected capacity change from 0 to 256 [ 99.647637][ T5312] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 99.742466][ T5318] loop7: detected capacity change from 0 to 256 [ 99.830495][ T5329] device veth0_virt_wifi entered promiscuous mode [ 99.837779][ T5329] device macsec1 entered promiscuous mode [ 100.087190][ T5362] bridge0: port 3(veth1_macvtap) entered blocking state [ 100.101801][ T5364] netlink: 277 bytes leftover after parsing attributes in process `syz.7.2239'. [ 100.128933][ T5362] bridge0: port 3(veth1_macvtap) entered disabled state [ 100.129820][ T5362] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 100.271225][ T5384] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.285270][ T5384] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 100.304056][ T5384] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 100.363048][ T5391] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.2252: bg 0: block 4: invalid block bitmap [ 100.375785][ T5391] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: comm syz.7.2252: inode #1: comm syz.7.2252: iget: illegal inode # [ 100.389290][ T5391] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.2252: error while reading EA inode 1 err=-117 [ 100.402193][ T5391] ------------[ cut here ]------------ [ 100.407732][ T5391] EA inode 11 i_nlink=1026 [ 100.407855][ T5391] WARNING: CPU: 0 PID: 5391 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4f9/0x560 [ 100.422519][ T5391] Modules linked in: [ 100.426429][ T5391] CPU: 0 PID: 5391 Comm: syz.7.2252 Not tainted syzkaller #0 [ 100.433933][ T5391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.444049][ T5391] RIP: 0010:ext4_xattr_inode_update_ref+0x4f9/0x560 [ 100.450709][ T5391] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 3a 32 ba ff 49 8b 34 24 48 c7 c7 80 4c b5 85 44 89 fa e8 17 36 45 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 4c 8b 74 24 08 4c 8b 64 24 10 [ 100.470368][ T5391] RSP: 0018:ffffc90000b871e0 EFLAGS: 00010246 [ 100.476439][ T5391] RAX: 4705511d0a190b00 RBX: ffff8881f719ed90 RCX: 0000000000080000 [ 100.484496][ T5391] RDX: ffffc90002d61000 RSI: 000000000000dd85 RDI: 000000000000dd86 [ 100.492523][ T5391] RBP: ffffc90000b872d0 R08: ffff8881f6e2759b R09: 1ffff1103edc4eb3 [ 100.500549][ T5391] R10: dffffc0000000000 R11: ffffed103edc4eb4 R12: ffff8881f719ec70 [ 100.508553][ T5391] R13: dffffc0000000000 R14: ffff8881f719ec30 R15: 0000000000000402 [ 100.516618][ T5391] FS: 00007efe9a5bd6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 100.525597][ T5391] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.532246][ T5391] CR2: 00007f8547da2000 CR3: 000000011cdf4000 CR4: 00000000003506b0 [ 100.540382][ T5391] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 100.548405][ T5391] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 100.556459][ T5391] Call Trace: [ 100.559777][ T5391] [ 100.562721][ T5391] ? ext4_xattr_block_csum+0x560/0x560 [ 100.568196][ T5391] ? kasan_save_alloc_info+0x1f/0x30 [ 100.573541][ T5391] ? __kasan_kmalloc+0x95/0xb0 [ 100.578336][ T5391] ? __ext4_journal_ensure_credits+0x30/0x470 [ 100.584462][ T5391] ? ext4_xattr_inode_dec_ref_all+0x4a5/0x1040 [ 100.590679][ T5391] ? kmalloc_trace+0x40/0xb0 [ 100.595274][ T5391] ext4_xattr_inode_dec_ref_all+0xae5/0x1040 [ 100.601325][ T5391] ? errseq_check+0x41/0x80 [ 100.605864][ T5391] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 100.611566][ T5391] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 100.618294][ T5391] ? ext4_mark_iloc_dirty+0x1771/0x19c0 [ 100.623909][ T5391] ext4_xattr_delete_inode+0xada/0xca0 [ 100.629427][ T5391] ? ext4_truncate+0xc1b/0x1000 [ 100.634290][ T5391] ? __cfi_ext4_xattr_delete_inode+0x10/0x10 [ 100.640337][ T5391] ext4_evict_inode+0xe48/0x1450 [ 100.645305][ T5391] ? __cfi_ext4_evict_inode+0x10/0x10 [ 100.650767][ T5391] ? __ext4_iget+0x2dae/0x3e70 [ 100.655566][ T5391] ? __cfi_ext4_evict_inode+0x10/0x10 [ 100.660988][ T5391] evict+0x4c4/0x8c0 [ 100.664926][ T5391] ? memset+0x35/0x40 [ 100.668913][ T5391] ? proc_nr_inodes+0x2f0/0x2f0 [ 100.673875][ T5391] ? _raw_spin_lock+0x94/0xf0 [ 100.678565][ T5391] ? __cfi__raw_spin_lock+0x10/0x10 [ 100.683818][ T5391] ? __kasan_check_write+0x14/0x20 [ 100.689004][ T5391] iput+0x633/0x690 [ 100.692859][ T5391] ext4_process_orphan+0x298/0x300 [ 100.697989][ T5391] ext4_orphan_cleanup+0xb5d/0x1270 [ 100.703281][ T5391] ? __cfi_ext4_orphan_cleanup+0x10/0x10 [ 100.708984][ T5391] ? errseq_check_and_advance+0x66/0x130 [ 100.714650][ T5391] ext4_fill_super+0x6a53/0x73e0 [ 100.719671][ T5391] ? __cfi_ext4_fill_super+0x10/0x10 [ 100.724984][ T5391] ? set_blocksize+0x1cc/0x470 [ 100.729813][ T5391] ? sb_set_blocksize+0xaa/0xf0 [ 100.734682][ T5391] get_tree_bdev+0x450/0x6a0 [ 100.739329][ T5391] ? __cfi_ext4_fill_super+0x10/0x10 [ 100.744666][ T5391] ext4_get_tree+0x1c/0x20 [ 100.749146][ T5391] vfs_get_tree+0x9a/0x270 [ 100.753606][ T5391] do_new_mount+0x251/0xb40 [ 100.758123][ T5391] ? security_capable+0x99/0xc0 [ 100.763062][ T5391] path_mount+0x640/0xfd0 [ 100.767424][ T5391] __se_sys_mount+0x320/0x390 [ 100.772170][ T5391] ? __x64_sys_mount+0xd0/0xd0 [ 100.776958][ T5391] ? do_user_addr_fault+0x9a5/0x1030 [ 100.782303][ T5391] __x64_sys_mount+0xbf/0xd0 [ 100.786940][ T5391] x64_sys_call+0x65d/0x9a0 [ 100.791528][ T5391] do_syscall_64+0x4c/0xa0 [ 100.795974][ T5391] ? clear_bhb_loop+0x30/0x80 [ 100.800694][ T5391] ? clear_bhb_loop+0x30/0x80 [ 100.805398][ T5391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.811366][ T5391] RIP: 0033:0x7efe9979f28a [ 100.815842][ T5391] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.835514][ T5391] RSP: 002b:00007efe9a5bce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 100.844003][ T5391] RAX: ffffffffffffffda RBX: 00007efe9a5bcee0 RCX: 00007efe9979f28a [ 100.852038][ T5391] RDX: 0000200000000340 RSI: 0000200000000140 RDI: 00007efe9a5bcea0 [ 100.860050][ T5391] RBP: 0000200000000340 R08: 00007efe9a5bcee0 R09: 0000000000800718 [ 100.868031][ T5391] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 100.876063][ T5391] R13: 00007efe9a5bcea0 R14: 00000000000004aa R15: 0000200000000680 [ 100.884086][ T5391] [ 100.887107][ T5391] ---[ end trace 0000000000000000 ]--- [ 100.892939][ T5391] EXT4-fs (loop7): 1 orphan inode deleted [ 100.898694][ T5391] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 100.936634][ T4790] EXT4-fs (loop7): unmounting filesystem. [ 101.319322][ T5446] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 101.371785][ T5446] EXT4-fs (loop7): orphan cleanup on readonly fs [ 101.379519][ T5446] EXT4-fs (loop7): 1 truncate cleaned up [ 101.385216][ T5446] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 101.477418][ T5440] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 101.484511][ T5440] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 101.485300][ T4790] EXT4-fs (loop7): unmounting filesystem. [ 101.493175][ T5440] F2FS-fs (loop1): fault_injection options not supported [ 101.505811][ T5440] F2FS-fs (loop1): fault_type options not supported [ 101.549720][ T5440] F2FS-fs (loop1): invalid crc value [ 101.580851][ T5440] F2FS-fs (loop1): Found nat_bits in checkpoint [ 101.672231][ T5484] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 101.688845][ T5440] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 101.702238][ T5440] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 101.852961][ T5456] F2FS-fs (loop6): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 101.889752][ T5456] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 101.937653][ T5456] F2FS-fs (loop6): invalid crc value [ 101.967936][ T5456] F2FS-fs (loop6): Found nat_bits in checkpoint [ 102.012734][ T5520] device bridge1 entered promiscuous mode [ 102.137227][ T5456] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 102.149704][ T5456] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 102.311302][ T5550] set_capacity_and_notify: 5 callbacks suppressed [ 102.311322][ T5550] loop4: detected capacity change from 0 to 512 [ 102.339237][ T5550] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 102.378426][ T5550] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 102.439525][ T5550] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 102.485342][ T5550] ext4 filesystem being mounted at /520/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.510397][ T28] kauditd_printk_skb: 757 callbacks suppressed [ 102.510414][ T28] audit: type=1326 audit(1787008747.194:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5526 comm=C007B0FDA31C0A171BFA8120DD21D9 exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca499e019 code=0x50000 [ 102.565521][ T5550] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #2: comm syz.4.2324: corrupted inode contents [ 102.599503][ T5572] loop7: detected capacity change from 0 to 512 [ 102.600889][ T5550] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #2: comm syz.4.2324: mark_inode_dirty error [ 102.631989][ T5550] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #2: comm syz.4.2324: corrupted inode contents [ 102.634584][ T5578] loop6: detected capacity change from 0 to 256 [ 102.650572][ T28] audit: type=1326 audit(1787008747.194:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5526 comm=C007B0FDA31C0A171BFA8120DD21D9 exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca499e019 code=0x50000 [ 102.678305][ T5575] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #2: comm syz.4.2324: corrupted inode contents [ 102.691201][ T5572] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.2334: invalid indirect mapped block 256 (level 2) [ 102.720301][ T5572] EXT4-fs (loop7): 2 truncates cleaned up [ 102.732638][ T5572] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 102.750042][ T5575] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #2: comm syz.4.2324: mark_inode_dirty error [ 102.761437][ T28] audit: type=1326 audit(1787008747.194:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5526 comm=C007B0FDA31C0A171BFA8120DD21D9 exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca499e019 code=0x50000 [ 102.808058][ T5575] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #2: comm syz.4.2324: corrupted inode contents [ 102.811670][ T5578] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 102.848159][ T4790] EXT4-fs (loop7): unmounting filesystem. [ 102.858814][ T5578] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.867478][ T5575] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.2324: mark_inode_dirty error [ 102.880620][ T28] audit: type=1326 audit(1787008747.194:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5526 comm=C007B0FDA31C0A171BFA8120DD21D9 exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca499e019 code=0x50000 [ 102.920400][ T5575] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #2: comm syz.4.2324: corrupted inode contents [ 102.955366][ T5575] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #2: comm syz.4.2324: mark_inode_dirty error [ 102.966861][ T28] audit: type=1326 audit(1787008747.194:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5526 comm=C007B0FDA31C0A171BFA8120DD21D9 exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca499e019 code=0x50000 [ 103.026472][ T291] EXT4-fs (loop4): unmounting filesystem. [ 103.036263][ T5582] device bridge0 entered promiscuous mode [ 103.050182][ T28] audit: type=1326 audit(1787008747.194:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5526 comm=C007B0FDA31C0A171BFA8120DD21D9 exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca499e019 code=0x50000 [ 103.104912][ T5570] loop1: detected capacity change from 0 to 40427 [ 103.120192][ T28] audit: type=1326 audit(1787008747.194:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5526 comm=C007B0FDA31C0A171BFA8120DD21D9 exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca499e019 code=0x50000 [ 103.154976][ T5570] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 103.179764][ T5570] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 103.188568][ T5570] F2FS-fs (loop1): invalid crc value [ 103.190477][ T5588] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2342'. [ 103.194752][ T28] audit: type=1326 audit(1787008747.194:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5526 comm=C007B0FDA31C0A171BFA8120DD21D9 exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca499e019 code=0x50000 [ 103.229781][ T28] audit: type=1326 audit(1787008747.194:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5526 comm=C007B0FDA31C0A171BFA8120DD21D9 exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca499e019 code=0x50000 [ 103.257361][ T28] audit: type=1326 audit(1787008747.194:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5526 comm=C007B0FDA31C0A171BFA8120DD21D9 exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca499e019 code=0x50000 [ 103.290023][ T5570] F2FS-fs (loop1): Found nat_bits in checkpoint [ 103.322787][ T5594] loop6: detected capacity change from 0 to 512 [ 103.329481][ T5594] EXT4-fs: Ignoring removed i_version option [ 103.386410][ T5570] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 103.400444][ T5570] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 103.439538][ T5594] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 103.465494][ T5594] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.519043][ T5580] loop7: detected capacity change from 0 to 40427 [ 103.531368][ T5580] F2FS-fs (loop7): invalid crc value [ 103.550497][ T5580] F2FS-fs (loop7): Found nat_bits in checkpoint [ 103.590563][ T2730] EXT4-fs (loop6): unmounting filesystem. [ 103.619483][ T5608] loop4: detected capacity change from 0 to 2048 [ 103.676211][ T5580] F2FS-fs (loop7): Start checkpoint disabled! [ 103.683618][ T5608] loop4: p1 < > p4 [ 103.691143][ T5608] loop4: p4 size 8388608 extends beyond EOD, truncated [ 103.706113][ T5580] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 103.742174][ T5580] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 103.814727][ T5619] loop1: detected capacity change from 0 to 128 [ 103.837129][ T4126] udevd[4126]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 103.854921][ T639] udevd[639]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 103.917007][ T5619] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 103.957555][ T5619] ext4 filesystem being mounted at /457/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.009126][ T1818] kworker/u4:5: attempt to access beyond end of device [ 104.009126][ T1818] loop7: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 104.067603][ T287] EXT4-fs (loop1): unmounting filesystem. [ 104.073729][ T1818] kworker/u4:5: attempt to access beyond end of device [ 104.073729][ T1818] loop7: rw=2049, sector=40976, nr_sectors = 8 limit=40427 [ 104.182720][ T5635] device ip6gretap0 entered promiscuous mode [ 104.223639][ T5637] loop4: detected capacity change from 0 to 512 [ 104.261374][ T5637] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 104.301536][ T5637] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.2362: bad orphan inode 131083 [ 104.318876][ T5623] loop6: detected capacity change from 0 to 40427 [ 104.340903][ T5637] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 104.360700][ T291] EXT4-fs (loop4): unmounting filesystem. [ 104.368667][ T5623] F2FS-fs (loop6): Found nat_bits in checkpoint [ 104.470545][ T5653] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2367'. [ 104.495563][ T5623] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 104.586628][ T5623] syz.6.2354: attempt to access beyond end of device [ 104.586628][ T5623] loop6: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 106.717698][ T2730] syz-executor: attempt to access beyond end of device [ 106.717698][ T2730] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 106.916082][ T5699] device vlan4 entered promiscuous mode [ 106.956548][ T5702] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 106.973874][ T5702] ext4 filesystem being mounted at /203/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 107.045400][ T5702] SELinux: Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped). [ 107.094007][ T2730] EXT4-fs (loop6): unmounting filesystem. [ 107.120758][ T5724] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 107.151295][ T5724] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.207716][ T4790] EXT4-fs (loop7): unmounting filesystem. [ 107.397531][ T5769] set_capacity_and_notify: 2 callbacks suppressed [ 107.397550][ T5769] loop4: detected capacity change from 0 to 512 [ 107.429410][ T5769] EXT4-fs: dax option not supported [ 107.563242][ T5787] bridge: RTM_DELNEIGH with unconfigured vlan 1 on bridge0 [ 107.651412][ T5748] loop7: detected capacity change from 0 to 40427 [ 107.667292][ T5748] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504) [ 107.699731][ T5748] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 107.733648][ T5811] syz.0.2441 (5811): /proc/5808/oom_adj is deprecated, please use /proc/5808/oom_score_adj instead. [ 107.754690][ T5748] F2FS-fs (loop7): invalid crc value [ 107.760056][ T5748] F2FS-fs (loop7): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node [ 107.791134][ T5748] F2FS-fs (loop7): Found nat_bits in checkpoint [ 107.862148][ T5748] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 107.887368][ T5748] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 107.968171][ T5748] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 108.024838][ T5845] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 108.120005][ T5859] device erspan0 entered promiscuous mode [ 108.144475][ T5859] device macsec2 entered promiscuous mode [ 108.161490][ T5859] device erspan0 left promiscuous mode [ 108.810098][ T5935] netlink: 'syz.0.2500': attribute type 5 has an invalid length. [ 108.941595][ T5948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2506'. [ 109.007725][ T28] kauditd_printk_skb: 3992 callbacks suppressed [ 109.007742][ T28] audit: type=1326 audit(1787008753.704:5264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.7.2510" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9979e019 code=0x7ffc0000 [ 109.157415][ T28] audit: type=1326 audit(1787008753.735:5265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.7.2510" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9979e019 code=0x7ffc0000 [ 109.265567][ T28] audit: type=1326 audit(1787008753.746:5266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.7.2510" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9979e019 code=0x7ffc0000 [ 109.368835][ T28] audit: type=1326 audit(1787008753.746:5267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.7.2510" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9979e019 code=0x7ffc0000 [ 109.394507][ T5838] loop4: detected capacity change from 0 to 131072 [ 109.418844][ T28] audit: type=1326 audit(1787008753.746:5268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.7.2510" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efe9979e019 code=0x7ffc0000 [ 109.442993][ T5838] F2FS-fs (loop4): invalid crc value [ 109.451569][ T5997] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2528'. [ 109.486460][ T6001] device gretap0 entered promiscuous mode [ 109.499097][ T6001] device vlan2 entered promiscuous mode [ 109.506418][ T5838] F2FS-fs (loop4): Found nat_bits in checkpoint [ 109.514858][ T28] audit: type=1326 audit(1787008753.746:5269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.7.2510" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9979e019 code=0x7ffc0000 [ 109.589577][ T28] audit: type=1326 audit(1787008753.746:5270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.7.2510" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9979e019 code=0x7ffc0000 [ 109.667340][ T5838] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 109.674987][ T28] audit: type=1326 audit(1787008753.746:5271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.7.2510" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9979e019 code=0x7ffc0000 [ 109.787031][ T28] audit: type=1326 audit(1787008753.746:5272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.7.2510" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9979e019 code=0x7ffc0000 [ 109.829005][ T6034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.864364][ T28] audit: type=1326 audit(1787008753.746:5273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.7.2510" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7efe9979e019 code=0x7ffc0000 [ 110.388840][ T6098] netlink: 'syz.7.2576': attribute type 7 has an invalid length. [ 110.409837][ T6098] netlink: 'syz.7.2576': attribute type 8 has an invalid length. [ 110.504427][ T6114] loop4: detected capacity change from 0 to 512 [ 110.511031][ T6115] device veth1_macvtap left promiscuous mode [ 110.517924][ T6115] device macsec0 entered promiscuous mode [ 110.527974][ T6115] device veth1_macvtap entered promiscuous mode [ 110.534436][ T6115] device macsec0 left promiscuous mode [ 110.556447][ T6121] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2587'. [ 110.566161][ T6114] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2584: invalid indirect mapped block 256 (level 2) [ 110.585406][ T6114] EXT4-fs (loop4): 2 truncates cleaned up [ 110.596745][ T6114] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 110.605845][ T6124] loop6: detected capacity change from 0 to 512 [ 110.638932][ T291] EXT4-fs (loop4): unmounting filesystem. [ 110.646941][ T6124] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 110.682067][ T6124] ext4 filesystem being mounted at /226/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.715872][ T2730] EXT4-fs (loop6): unmounting filesystem. [ 110.945151][ T6166] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2608'. [ 111.071603][ T6179] overlayfs: conflicting options: userxattr,redirect_dir=on [ 111.107801][ T6186] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2618'. [ 111.177979][ T6198] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2623'. [ 111.200795][ T6202] sock: sock_set_timeout: `syz.6.2626' (pid 6202) tries to set negative timeout [ 111.236596][ T6207] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2628'. [ 111.246133][ T6207] netem: change failed [ 111.436773][ T6242] netlink: 'syz.0.2645': attribute type 1 has an invalid length. [ 111.616322][ T6262] netlink: 'syz.6.2654': attribute type 4 has an invalid length. [ 111.624579][ T6262] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2654'. [ 111.695497][ T6274] loop4: detected capacity change from 0 to 512 [ 111.715332][ T6274] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.732423][ T6276] xt_hashlimit: size too large, truncated to 1048576 [ 111.739957][ T6274] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.753357][ T6278] loop7: detected capacity change from 0 to 1024 [ 111.769183][ T6278] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.779755][ T6274] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 111.790832][ T6274] ext4 filesystem being mounted at /584/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.809935][ T6278] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 111.824225][ T6274] EXT4-fs error (device loop4): ext4_get_first_dir_block:3591: inode #12: block 32: comm syz.4.2659: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 111.866072][ T4790] EXT4-fs (loop7): unmounting filesystem. [ 111.873493][ T6274] EXT4-fs (loop4): Remounting filesystem read-only [ 111.899800][ T6274] EXT4-fs error (device loop4): ext4_get_first_dir_block:3594: inode #12: comm syz.4.2659: directory missing '.' [ 111.915061][ T6274] EXT4-fs (loop4): Remounting filesystem read-only [ 111.934061][ T291] EXT4-fs (loop4): unmounting filesystem. [ 112.026043][ T6294] mmap: syz.7.2667 (6294): VmData 167473152 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 112.339222][ T6336] loop1: detected capacity change from 0 to 256 [ 112.527391][ T6363] loop1: detected capacity change from 0 to 256 [ 112.539579][ T6363] exfat: Deprecated parameter 'utf8' [ 112.544974][ T6363] exfat: Deprecated parameter 'utf8' [ 112.554554][ T6363] exfat: Deprecated parameter 'namecase' [ 112.560722][ T6363] exfat: Deprecated parameter 'namecase' [ 112.566473][ T6363] exfat: Deprecated parameter 'utf8' [ 112.599282][ T6363] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 112.689506][ T6377] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2707'. [ 115.621679][ T6379] device dummy0 entered promiscuous mode [ 115.652116][ T6386] loop1: detected capacity change from 0 to 512 [ 115.676901][ T6386] EXT4-fs: Ignoring removed orlov option [ 115.700306][ T6386] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 115.729114][ T6386] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 115.798356][ T6386] EXT4-fs error (device loop1): ext4_iget_extra_inode:4765: inode #15: comm syz.1.2711: corrupted in-inode xattr [ 115.815186][ T6402] loop6: detected capacity change from 0 to 512 [ 115.829467][ T6386] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.2711: couldn't read orphan inode 15 (err -117) [ 115.874959][ T6402] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 115.892690][ T6386] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 115.901577][ T6402] EXT4-fs (loop6): Remounting filesystem read-only [ 115.932408][ T6402] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2719: invalid indirect mapped block 4278190080 (level 0) [ 115.946720][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2711'. [ 115.955932][ T6407] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 115.980646][ T6402] EXT4-fs (loop6): Remounting filesystem read-only [ 115.988395][ T287] EXT4-fs (loop1): unmounting filesystem. [ 115.999185][ T6402] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2719: invalid indirect mapped block 1 (level 1) [ 116.027616][ T6402] EXT4-fs (loop6): Remounting filesystem read-only [ 116.044332][ T6402] EXT4-fs (loop6): 1 truncate cleaned up [ 116.063455][ T6402] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 116.109974][ T2730] EXT4-fs (loop6): unmounting filesystem. [ 116.129524][ T6417] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 116.146703][ T6417] SELinux: security_context_str_to_sid (^) failed with errno=-22 [ 116.299229][ T6433] loop7: detected capacity change from 0 to 4096 [ 116.334226][ T6433] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 116.404342][ T4790] EXT4-fs (loop7): unmounting filesystem. [ 116.500797][ T6452] device bridge0 entered promiscuous mode [ 117.217393][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 117.217410][ T28] audit: type=1326 audit(1787008761.984:5313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6540 comm="syz.1.2785" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814139e019 code=0x7ffc0000 [ 117.293680][ T28] audit: type=1326 audit(1787008761.984:5314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6540 comm="syz.1.2785" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814139e019 code=0x7ffc0000 [ 117.362254][ T28] audit: type=1326 audit(1787008762.014:5315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6540 comm="syz.1.2785" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814139e019 code=0x7ffc0000 [ 117.407014][ T28] audit: type=1326 audit(1787008762.024:5316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6540 comm="syz.1.2785" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814139e019 code=0x7ffc0000 [ 117.461020][ T28] audit: type=1326 audit(1787008762.024:5317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6540 comm="syz.1.2785" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f814139e019 code=0x7ffc0000 [ 117.528243][ T28] audit: type=1326 audit(1787008762.024:5318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6540 comm="syz.1.2785" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814139e019 code=0x7ffc0000 [ 117.615203][ T28] audit: type=1326 audit(1787008762.024:5319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6540 comm="syz.1.2785" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814139e019 code=0x7ffc0000 [ 117.686978][ T28] audit: type=1326 audit(1787008762.024:5320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6540 comm="syz.1.2785" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814139e019 code=0x7ffc0000 [ 117.774896][ T28] audit: type=1326 audit(1787008762.024:5321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6540 comm="syz.1.2785" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814139e019 code=0x7ffc0000 [ 117.825265][ T28] audit: type=1326 audit(1787008762.024:5322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6540 comm="syz.1.2785" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f814139e019 code=0x7ffc0000 [ 117.940943][ T6595] loop1: detected capacity change from 0 to 512 [ 117.999361][ T6595] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 118.020138][ T6595] ext4 filesystem being mounted at /555/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.041840][ T6606] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2815'. [ 118.112012][ T287] EXT4-fs (loop1): unmounting filesystem. [ 118.204373][ T6623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.412210][ T6645] loop1: detected capacity change from 0 to 512 [ 118.461520][ T6645] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 118.476270][ T6645] ext4 filesystem being mounted at /562/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.611000][ T6665] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2842'. [ 118.626753][ T287] EXT4-fs (loop1): unmounting filesystem. [ 118.838686][ T6653] loop6: detected capacity change from 0 to 40427 [ 118.864511][ T6653] F2FS-fs (loop6): invalid crc value [ 118.880675][ T6653] F2FS-fs (loop6): Found nat_bits in checkpoint [ 118.931679][ T6653] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 118.997368][ T6685] f2fs_ckpt-7:6: attempt to access beyond end of device [ 118.997368][ T6685] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 119.140530][ T6701] device veth1_macvtap left promiscuous mode [ 119.153135][ T6701] device macsec0 entered promiscuous mode [ 119.188015][ T6701] device veth1_macvtap entered promiscuous mode [ 119.212923][ T6701] device macsec0 left promiscuous mode [ 119.550582][ T6749] netlink: 604 bytes leftover after parsing attributes in process `syz.0.2880'. [ 119.570724][ T6749] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 119.599349][ T6753] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2882'. [ 119.627195][ T2493] ------------[ cut here ]------------ [ 119.632724][ T2493] kernel BUG at fs/buffer.c:2714! [ 119.657638][ T2493] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 119.663794][ T2493] CPU: 1 PID: 2493 Comm: kmmpd-loop0 Tainted: G W syzkaller #0 [ 119.672774][ T2493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.682878][ T2493] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 119.688305][ T2493] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 c8 de e7 ff e9 b0 fe ff ff e8 3e 54 a2 ff 0f 0b e8 37 54 a2 ff <0f> 0b e8 30 54 a2 ff 0f 0b e8 29 54 a2 ff 0f 0b e8 22 54 a2 ff 0f [ 119.707955][ T2493] RSP: 0018:ffffc90010b1fca0 EFLAGS: 00010293 [ 119.714103][ T2493] RAX: ffffffff81cf1209 RBX: 0000000000000000 RCX: ffff888110715100 [ 119.722128][ T2493] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.730148][ T2493] RBP: ffffc90010b1fcf0 R08: ffff888133cebe77 R09: 1ffff1102679d7ce [ 119.738155][ T2493] R10: dffffc0000000000 R11: ffffed102679d7cf R12: 0000000000000000 [ 119.746173][ T2493] R13: 1ffff1102679d7ce R14: ffff888133cebe70 R15: 0000000000003801 [ 119.754192][ T2493] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 119.763231][ T2493] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.769835][ T2493] CR2: 00007efe9a5bcff8 CR3: 0000000132cfc000 CR4: 00000000003506a0 [ 119.777829][ T2493] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 119.785823][ T2493] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 119.793812][ T2493] Call Trace: [ 119.797101][ T2493] [ 119.800048][ T2493] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 119.805883][ T2493] submit_bh+0x1f/0x30 [ 119.809976][ T2493] write_mmp_block_thawed+0x397/0x510 [ 119.815366][ T2493] ? __cfi_schedule_timeout+0x10/0x10 [ 119.820760][ T2493] ? read_mmp_block+0x700/0x700 [ 119.825627][ T2493] ? __cfi_process_timeout+0x10/0x10 [ 119.830945][ T2493] ? switch_mm_irqs_off+0x730/0x960 [ 119.836178][ T2493] write_mmp_block+0x138/0x2b0 [ 119.840991][ T2493] kmmpd+0x382/0x940 [ 119.844931][ T2493] kthread+0x281/0x320 [ 119.849028][ T2493] ? __cfi_kmmpd+0x10/0x10 [ 119.853561][ T2493] ? __cfi_kthread+0x10/0x10 [ 119.858172][ T2493] ret_from_fork+0x1f/0x30 [ 119.862616][ T2493] [ 119.865652][ T2493] Modules linked in: [ 119.881807][ T2493] ---[ end trace 0000000000000000 ]--- [ 119.887587][ T2493] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 119.893074][ T2493] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 c8 de e7 ff e9 b0 fe ff ff e8 3e 54 a2 ff 0f 0b e8 37 54 a2 ff <0f> 0b e8 30 54 a2 ff 0f 0b e8 29 54 a2 ff 0f 0b e8 22 54 a2 ff 0f [ 119.913262][ T2493] RSP: 0018:ffffc90010b1fca0 EFLAGS: 00010293 [ 119.926561][ T2493] RAX: ffffffff81cf1209 RBX: 0000000000000000 RCX: ffff888110715100 [ 119.936615][ T2493] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.944740][ T2493] RBP: ffffc90010b1fcf0 R08: ffff888133cebe77 R09: 1ffff1102679d7ce [ 119.952830][ T2493] R10: dffffc0000000000 R11: ffffed102679d7cf R12: 0000000000000000 [ 119.961292][ T2493] R13: 1ffff1102679d7ce R14: ffff888133cebe70 R15: 0000000000003801 [ 119.969818][ T2493] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 119.979055][ T2493] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.985799][ T2493] CR2: 00007efe999ef2f8 CR3: 000000010fab9000 CR4: 00000000003506a0 [ 119.994099][ T2493] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 120.002340][ T2493] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 120.010592][ T2493] Kernel panic - not syncing: Fatal exception [ 120.016819][ T2493] Kernel Offset: disabled [ 120.021159][ T2493] Rebooting in 86400 seconds..